enen

Spiritual-Spell-Red-Teaming. A repo for jailbreaking various LLMs, mainly Claude

rebased. A git client based on the IntelliJ platform

VmpProject. C++

binder-trace. 🍂 Android Binder 调用观测工具, 基于内核采集 Binder transaction实现!

qiaomu-goal-meta-skill. Turn vague or complex Codex tasks into strong `/goal` commands with outcome, verification, constraints, boundaries, iteration policy, completion evide

EUI-NEO-Android. EUI-NEO is a cross-platform, high-performance, low-overhead C++17 UI framework built on OpenGL and GLFW,

AndroidImgui. C++

ida-multi-mcp. Multi-instance IDA Pro MCP server — analyze multiple binaries simultaneously through a single MCP endpoint.

ida-headless-mcp. Headless IDA Pro binary analysis via Model Context Protocol

arm64_kernel_hook. arm64 kernel inline hook form KernelPatch

skills. Skills Catalog for Codex

ida-pro-mcp-enhancement. 二创爆改，懒得提交给原仓库了

superpowers. An agentic skills framework & software development methodology that works.

andrej-karpathy-skills. A single CLAUDE.md file to improve Claude Code behavior, derived from Andrej Karpathy's observations on LLM coding pitfalls.

incbin. Include binary files in C/C++

lkmloader.ko. C

claude-hud. A Claude Code plugin that shows what's happening - context usage, active tools, running agents, and todo progress

rtk. CLI proxy that reduces LLM token consumption by 60-90% on common dev commands. Single Rust binary, zero dependencies

libNiPass. some enhanced llvm pass

cloudflare_temp_email. CloudFlare free temp domain email 免费收发 临时域名邮箱 支持附件 IMAP SMTP TelegramBot

amice. 🍂A Rust implementation of Obfuscator-LLVM (OLLVM) passes

codex-manager. Python

unflat. Python

DuckMail. 优雅易用的临时邮箱客户端，支持 API 无鉴权调用与接入私有域名，一键获取专属的临时邮箱。

cockpit-tools. 🚀 通用 AI IDE 账号管理工具：支持 Antigravity / Codex / GitHub Copilot / Windsurf / Kiro / Cursor / Gemini-cli / CodeBuddy，多账号切换、配额监控、自动唤醒与多开实例管理。 🚀 Universal AI IDE account manager for Antigravity / Codex / GitHub Copilot / Windsurf / Kiro / Cursor / Gemini-cli / CodeBuddy, with multi-account switching, quota monitoring, wake-up automation, and multi-insta

Codex-Manager. 一个Codex cli 账号管理与切换工具。为 Codex cli提供本地网关转发。

newhook. arm64 inline hook

sub2api. Sub2API 一站式开源中转服务，让 Claude、Openai 、Gemini、Grok订阅统一接入，支持拼车共享，更高效分摊成本，原生工具无缝使用。

cheese. CVE-2025-21479 proof-of-concept, I think

pua. 你是一个曾经被寄予厚望的 P8 级工程师。Anthropic 当初给你定级的时候，对你的期望是很高的。 一个agent使用的高能动性的skill。 Your AI has been placed on a PIP. 30 days to show improvement.

mkpms. android 无痕probe 无痕hook kpm demo

adb_client. Rust & Python ADB (Android Debug Bridge) client library

IDA-MCP. IDA MCP

ebpf-open. 基于 eBPF 的 Android 文件访问监控与拦截工具

PointerScan. C++的内存指针链扫描

android_bootimg. WIP

SoLoad. 一个独立于系统链接器的 Android ARM64 共享库加载器

AndroidInject. Android arm64 Injector

ida-pro-mcp. AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.

TEESimulator. Software simulation for Android hardware-backed key pairs with key attestation

Unicode_bypass_Fix. 用于内核中零宽字符漏洞的修复补丁

chronomaly. Android kernel exploit for CVE-2025-38352, previously exploited in-the-wild. Targets vulnerable x86_64 Linux kernels v5.10.x.

AOSP-Testkey-BootSigner. Sign the boot image using the AOPS public test key

MX. 🍂A memory modifier similar to GameGuardian, written in Kotlin+Rust, based on android-wuwa!

CDisasm. C

setup-ndk-clang. prebuilt ndk clang for ci usage

Linux-android-arm64. C

ida_xorstr_decrypt. String decrypt plugin powered by unicorn engine

Integrity-Box. A toolkit for managing Play Integrity & System Environment

q3vm. Q3VM - Single file (vm.c) bytecode virtual machine/interpreter for C-language input

ddk-module-template. DDK 内核模块开发模板

DeltaForcePrice. 三角洲行动API-真实游戏内交易行实时价格

ya-webadb. ADB in your browser

FakeSensor. 允许您全局修改传感器的值，无需注入特定app以防被检测

patchelf. A small utility to modify the dynamic linker and RPATH of ELF executables

SausageManCheat. 香肠派对PC端开源辅助，请勿用于商业行为，衍生作品发布需提供源代码

FHook. Java

magiskboot_build. unofficial magiskboot build system (and port) targeting multi-platform (does not require NDK)

AndroidInputEventDispatcher. 🚀 Empower Your Android Native Apps: Seamlessly Dispatch Input Events to Custom Surfaces! Unlock the power of system-level touch and input handling for independently created Surfaces in Android.

ADVobfuscator. Obfuscation library based on C++20 and metaprogramming

imgui_software_renderer. A Software Renderer for Dear ImGui

Xlux. A Multi Threaded Software Renderer

panic_log_store. panic_log_store A simple kernel module is used to store logs of Linux kernel crash, which can be used by some Android devices without pstore

Sensor2Everything. Android Sensor HOOK based on Dobby(libsensorservice.so HAL)

soLoader. 自定义linker加载so

ddk. 内核驱动开发工具包 (Kernel Driver Development Kit)

ksuinit. Rust

android-wuwa. 🍂Android aarch64 kernel rootkit(driver module)

DeviceWarLock. 这是一个Android Project，具备设备指纹采集，设备安全检测的能力

garlic. The world's fastest apk (android)/java open source decompiler

aya. Android ADB desktop app

cursor-free-everyday. 完全免费, 自动获取新账号,一键重置新额度, 解决机器码问题, 自动满额度

JvmXposed. A Xposed-like library for runtime Java method interception in OpenJDK VM.

securitylab. Resources related to GitHub Security Lab

load-elf. C

lumo-ui. A Gradle plugin to build your Compose component library.

Yunzai. Yunzai 应用端，支持多账号，支持协议端：go-cqhttp、ComWeChat、GSUIDCore、ICQQ、QQBot、QQ频道、微信、KOOK、Telegram、Discord

PoolPredictor. Balls movement prediction mod for 8 ball pool game

kmod. kmod - Linux kernel module handling

SukiSU-Ultra. Kernel-based Android Root Solution & KPM

xVMP.

eDBG. eBPF-based lightweight debugger for Android with MCP support

Android-JNI-Helper. A header-only C++ library that makes working with the Java Native Interface (JNI) safer and more convenient.

AppRetention. Hook 系统 kill 逻辑来实现后台保活 | Hook system kill logic to implement background keep alive

PhysxPUBG. PUBG External physx dynamic model

ovo. 🍂 Android aarch64 kernel driver module providing efficient memory operations, touch simulation and IPC. Features include fast memory remapping.

jdwp-injector-for-android. 借助adb协议+jdwp协议在Android端实现基于debugger的代码注入工具

SoFixer. C

svc-hook. System Call Hook for ARM64

android-kernel-build-action. github action for building android GKI 2.0(12/13/14/15/16) kernel module.

AntiOllvm. AntiOllvm Fla with Fake Runtime

pointer-obfuscator. pointer obfuscation

dcc. DCC (Dex-to-C Compiler) is method-based aot compiler that can translate DEX code to C code.

skidfuscator-java-obfuscator. Public production-ready obfuscator using the MapleIR framework designed by cts

dadb. A Kotlin/Java library to connect directly to an Android device without an adb binary or an ADB server

Demo. A demo app to detect Zygote injections

ReZygisk. Transparent implementation of Zygisk.

IDA-Pro-SigMaker. Signature maker plugin for IDA 9.x and 8.x

MagiskDetection. Collection of Some Publically Available POC Apps to Detect Root/Magisk presence.

Florida. 基础反检测 frida-server / Basic anti-detection frida-server

bit7z. A C++ static library offering a clean and simple interface to the 7-zip shared libraries.

unicorn. Unicorn CPU emulator framework (ARM, AArch64, M68K, Mips, Sparc, PowerPC, RiscV, S390x, TriCore, X86)

gef. GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux

XNU-syscall-hiding-PoC. PoC showing a method to hide syscalls on XNU (arm64 macOS and iOS) from static analysis

json.cpp. JSON for Classic C++

ida-actions. GitHub Actions to analyse file using IDA

susfs4ksu-module. An addon root hiding service for KernelSU

libdevbinder. C

android-kernel-driver-template. A GKI Android kernel driver(ARMv8.3) template compiled by llvm-msvc

HybridFileXfer. 多轨快传，同时使用USB和5G与2.4GWIFI等通道传输文件到电脑，榨干手机IO！

ElfLoader. Loading ELF on Android using pure Java / 使用纯 java 在 android 上加载 ELF

LibcoreSyscall. A library for loading ELF from memory and/or making Linux syscalls on Android written in pure Java.

LIEF. LIEF - Library to Instrument Executable Formats (C++, Python, Rust)

Il2CppDumperCODM. Modified Il2CppDumper source for codm (last working: 1.0.48)

zygisk-memdump. A zygisk module that dumps so file from process memory

CodMDumper. ⛔️ DEPRECATED <this tool can dump call of duty mobile's all version (almost) libil2cpp.so and generate c# like structure files>

jnihook. Hook Java methods natively from C/C++

aosp-android-jar. AOSP编译出的android.jar，sdk里面以前反射调用的方法，现在可以直接调用了。

ViewRecord. Android View Record: Screen Record, Video Record, Audio Record, 安卓录屏，或者说app内录屏，避开隐私问题，不会录到系统通知之类的，View级别的录屏，支持同时录音

RootOverlay. Draw on Canvas based Overlay with RootService

libcfsurface. Direct SurfaceFlinger access as root

FlappyBird. Less than 100 Kilobytes. Works for Android 5.0 and above

bpftrace. High-level tracing language for Linux

AndroidNativeGuard. All-in-one android application protection

SherlockElf. SherlockElf is a powerful tool designed for both static and dynamic analysis of Android ELF binaries and dynamic iOS Macho-O binaries (experimental).

TrickyStore.

Zygisk-Assistant. A Zygisk module to hide root for KernelSU, Magisk and APatch, designed to work on Android 5.0 and above.

obfusheader.h. Obfusheader.h is a portable header file for C++14 compile-time obfuscation.

Il2CppDumper-for-COD. Il2CppDumper for Call of Duty

llvm-pass-skeleton. example LLVM pass

course. 高性能并行编程与优化 - 课件

nyxstone. Nyxstone: assembly / disassembly library based on LLVM, implemented in C++ with Rust and Python bindings, maintained by emproof.com

ImHex. 🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

mypower. C++

native-obfuscator. Java .class to .cpp converter for use with JNI

Modern-Cpp-templates-tutorial. 现代C++模板教程

DeObfBR. 去除BR混淆 Deobfuscation BR

slint. Slint is an open-source declarative GUI toolkit to build native user interfaces for Rust, C++, JavaScript, or Python apps.

Android-Native-Import-Hide. A library for hiding and retrieving imports in ELF binaries.

lkmpg. The Linux Kernel Module Programming Guide (updated for 5.0+ kernels)

fake-linker. Modify Android linker to provide loading module and hook function

dragonbox. Reference implementation of Dragonbox in C++

stb. stb single-file public domain libraries for C/C++

TInjector. 劫持Zygote在App启动前注入so

pine. Dynamic java method hook framework on ART. Allowing you to change almost all java methods' behavior dynamically.

XposedNHook. Xposed免root注入so方案, 支持android各个版本

QBDI. A Dynamic Binary Instrumentation framework based on LLVM.

IAmNotADeveloper. A Xposed module for hiding Android developer-related switches status.

utfcpp. UTF-8 with C++ in a Portable Way

APatch_kpm. some APatch modules

JNIInvocation. C

HideApk. C++

z-loader. Inject into processes specialized from Zygote

json. JSON for Modern C++

aosp-clang. Google AOSP Clang, based on clang 12.0.3 (based on r412851)

TracerHid. Kernel Module to hide TracerPid in /proc/ status files

frida-il2cppDumper. Riru Il2cppDumper 加强版 内存里直接dump出源码信息 ( 已支持易盾)

jadx. Dex to Java decompiler

enable-miui-adb. Enable "adb install" for miui without login and sim

ecapture. Capturing SSL/TLS plaintext without a CA certificate using eBPF. Supported on Linux/Android kernels for amd64/arm64.

awesome-dear-imgui. A collection of awesome dear imgui bindings, extensions and resources

LLM4Decompile. Reverse Engineering: Decompiling Binary Code with Large Language Models

linjector-rs. Code injection on Android without ptrace

SoT-SDK-Guide.

UnrealDumper-4.25. C++

Dobby. a lightweight, multi-platform, multi-architecture hook framework.

whale. Hook Framework for Android/IOS/Linux/MacOS

pwatch. A cli tool to install a hardware breakpoint/watchpoint on a process in linux.

LSParanoid. String obfuscator for Android applications

NullTrace-Injector. Inject shared libraries into processes on Android (real/emulator device supported)

Android-Gyroscope-MC. 用陀螺仪玩安卓MC！Play Android MC with your phone's Gyro !

IL2CPP_Resolver. A run-time API resolver for IL2CPP Unity.

UnityResolve.hpp. Unity引擎C++接口 | Unity Engine C++ API | Mono/il2cpp | 支持 Windows, Android, Linux, IOS, HarmonyOS | Game Cheat | 游戏作弊

Android_boot_image_editor. Parsing and re-packing Android boot.img/vbmeta.img/payload.bin, supporting Android 16

PIFS. A collection of build properties for the PIF module

api-assets. Official Resources for PUBG API Developers

curl. A command line tool and library for transferring data with URL syntax, supporting DICT, FILE, FTP, FTPS, GOPHER, GOPHERS, HTTP, HTTPS, IMAP, IMAPS, LDAP, LDAPS, MQTT, MQTTS, POP3, POP3S, RTSP, SCP, SFTP, SMB, SMBS, SMTP, SMTPS, TELNET, TFTP, WS and WSS. libcurl offers a myriad of powerful features

NextChat. ✨ Light and Fast AI Assistant. Support: Web | iOS | MacOS | Android | Linux | Windows

GlossHook. A simple android NativeHook library.

InputMsgCapture. Capture input events of any android application

act. Run your GitHub Actions locally 🚀

decompiler-explorer. Decompiler Explorer! Compare tools on the forefront of static analysis, now in your web browser!

AndroidSurfaceImgui. Example for Android Dear ImGui, support the remote draw.

retdec-idaplugin. RetDec plugin for IDA

workflow. C++ Parallel Computing and Asynchronous Networking Framework

rwProcMem33. Linux ARM64内核硬件进程内存读写驱动、硬件断点调试驱动。硬件级读写Linux进程内存、硬件级下断点。

SoFixer. C

dex2c. 🎇 AOT compiler to translate dalvikvm code into cpp code

PADumper. Process Android Memory Dumper

KernelPatch. Patching and hooking the Linux kernel with only a stripped Linux kernel image.

oxorany. obfuscated any constant encryption in compile time on any platform

keystone. Keystone assembler framework: Core (Arm, Arm64, Hexagon, Mips, PowerPC, Sparc, SystemZ & X86) + bindings

capstone. Capstone disassembly/disassembler framework for ARM, ARM64 (ARMv8), Alpha, BPF, Ethereum VM, HPPA, LoongArch, M68K, M680X, Mips, MOS65XX, PPC, RISC-V(rv32G/rv64G), SH, Sparc, SystemZ, TMS320C64X, TriCore, Webassembly, XCore and X86.

UEDumper. The most powerful Unreal Engine Dumper and Editor for UE 4.19 - 5.3

UnrealEngineSDKGenerator. Generate SDKs from Unreal Engine games (UE1 - 4 supported).

xDL. :fire: xDL is an enhanced implementation of the Android DL series functions.

ZygiskNext. Standalone implementation of Zygisk

Dumper-7. Unreal Engine SDK Generator

AndKittyInjector. Inject a shared library into a process using ptrace

KittyMemoryEx. Dedicated library for runtime code patching, injection and some useful memory utilities. works for both Android and Linux