AhRMo

lamda

⚡️ Android reverse engineering & automation framework | 史上最强安卓抓包/逆向/HOOK & 云手机/远程桌面/自动化取证框架，你的工作从未如此简单快捷。

fuzzing

Tutorials, examples, discussions, research proposals, and other resources related to fuzzing

ebpf-for-windows

eBPF implementation that runs on top of Windows

SKRoot-linuxKernelRoot

新一代SKRoot，挑战全网root检测手段，跟面具完全不同思路，摆脱面具被检测的弱点，完美隐藏root功能，全程不需要暂停SELinux，实现真正的SELinux 0%触碰，通用性强，通杀所有内核，不需要内核源码，直接patch内核，兼容安卓APP直接JNI调用，稳定、流畅、不闪退。

APKiD

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

fridaUiTools

frida工具的缝合怪

learning-ebpf

Learning eBPF, published by O'Reilly - out now! Here's where you'll find a VM config for the examples, and more

wmiexec-Pro

New generation of wmiexec.py

blutter

Flutter Mobile Application Reverse Engineering Tool

BugChecker

SoftICE-like kernel debugger for Windows 11

stackplz

基于eBPF的堆栈追踪工具

nmmp

dex-vm used to protect the android classes.dex file

H5GG

an iOS Mod Engine with JavaScript APIs & Html5 UI

ZygiskFrida

Injects frida gadget using zygisk to bypass anti-tamper checks.

HellHall

Performing Indirect Clean Syscalls

frida-qbdi-tracer

Chaos-me-JavaScript-V8

零基础入门V8引擎漏洞挖掘

frida-ceserver

Frida-based ceserver: A fusion of Cheat Engine and Frida.

msidump

MSI Dump - a tool that analyzes malicious MSI installation packages, extracts files, streams, binary data and incorporates YARA scanner.

heap_detective

The simple way to detect heap memory pitfalls in C++ and C. Beta.

bobalkkagi

Themida 3.x unpacking, unwrapping and devirtualization(future)

pastis

PASTIS: Collaborative Fuzzing Framework

fpicker-aflpp-android

Fpicker with AFL++ on Android (device or emulator)

tools

Tools developed by the Zscaler ThreatLabz Threat Intelligence team

fdcalls

honeybadger

intro-to-gamehacking

A compendium of things related to reverse engineering videogames

proxyfire

Transparent Proxy via Frida hooks

FwHandler

This tool is used to handle firmware that binwalk cannot unpack directly and is mainly used for OOB removal, ECC removal, and bad block removal of raw firmware extracted from Nand Flash.

FakeToa

TCP IP伪造,建议使用 ubuntu 22.04