Kato

cheatengine-mcp-bridge. Connect Cursor, Copilot & Claude AI directly to Cheat Engine via MCP. Automate reverse engineering, pointer scanning, and memory analysis using natural language.

MediaCrawler. 小红书笔记 | 评论爬虫、抖音视频 | 评论爬虫、快手视频 | 评论爬虫、B 站视频 ｜ 评论爬虫、微博帖子 ｜ 评论爬虫、百度贴吧帖子 ｜ 百度贴吧评论回复爬虫 | 知乎问答文章｜评论爬虫

Process-Dump. Windows tool for dumping malware PE files from memory back to disk for analysis.

x64DbgMCPServer. x64DbgMCPServer made from c# with Claude, Windsurf and Cursor support

SoundSwitch. C# application to switch default playing device. Download: https://soundswitch.aaflalo.me/

DmaProtect. Shows an example of how to implement VT-d/AMD-Vi on Windows

TitanHide. Hiding kernel-driver for x86/x64.

SysWhispers3. SysWhispers on Steroids - AV/EDR evasion via direct system calls.

Windows-Research-Kernel-WRK-. Windows Research Kernel Source Code

ExtremeInjector.

uEmu. Tiny cute emulator plugin for IDA based on unicorn.

httpdebugger-crack. simple keygen for httpdebugger

RE-UE4SS. Injectable LUA scripting system, SDK generator, live property editor and other dumping utilities for UE4/5 games

Unity-PDB-Downloader. Downloads a Unity game's UnityPlayer PDB file.

Virtuailor. IDAPython tool for creating automatic C++ virtual tables in IDA Pro

SharpMonoInjector. SharpMonoInjector wh0am1 Mod. Fixed and Updated. A tool for injecting assemblies into Mono embedded applications, commonly Unity Engine based games

android-google-play-store. 安装谷歌三件套：google服务框架 ; google play service ;google play store

SysWhispers2. AV/EDR evasion via direct system calls.

SyscallTables. Windows NT Syscall tables

DetoursEx. Modified by Mircosoft detours.Support Window/Linux/Macos. Support X86/x64/ARM64/ARM/MIPS/LongArch.

systeminformer. A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ https://windows-internals.com

Detours. Detours is a software package for monitoring and instrumenting API calls on Windows. It is distributed in source code form.

flare-floss. FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.

Gepetto. IDA plugin which queries language models to speed up reverse-engineering

crifan_ebook_readme. Crifan的电子书的使用说明

ida-jm-xorstr-decrypt-plugin. Attempts to decrypt JM Xorstr in some x64 binaries

capa. The FLARE team's open-source tool to identify capabilities in executable files.

diaphora. Diaphora, the most advanced Free and Open Source program diffing tool.

ida-pro-mcp. AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.

LIEF. LIEF - Library to Instrument Executable Formats (C++, Python, Rust)

lumen. A private Lumina server for IDA Pro

hv. Lightweight Intel VT-x Hypervisor.

vmpdump. A dynamic VMP dumper and import fixer, powered by VTIL.

VMP-Imports-Deobfuscator. VMProtect 2.x-3.x x64 Import Deobfuscator

Dumper-7. Unreal Engine SDK Generator

Android-Inline-Hook. thumb16 thumb32 arm32 inlineHook in Android

MemProcFS. MemProcFS

reactos. A free Windows-compatible Operating System

PFHook. Page fault hook use ept (Intel Virtualization Technology)

hvpp. hvpp is a lightweight Intel x64/VT-x hypervisor written in C++ focused primarily on virtualization of already running operating system

AntiXorstr. IDA Pro plugin AntiXorstr

Magicmida. Themida unpacker

unlicense. Dynamic unpacker and import fixer for Themida/WinLicense 2.x and 3.x.

VmwareHardenedLoader. Vmware Hardened VM detection mitigation loader (anti anti-vm)

minhook. The Minimalistic x86/x64 API Hooking Library for Windows

YDArk. X64内核小工具

Il2CppDumper. Unity il2cpp reverse engineer

DdiMon. Monitoring and controlling kernel API calls with stealth hook using EPT

NtCall64. Windows NT x64 syscall fuzzer

undocumented-ntinternals.github.io. Mirror of http://undocumented.ntinternals.net/

vergilius-project. This project provides a collection of Microsoft Windows kernel structures, unions and enumerations. Most of them are not officially documented and cannot be found in Windows Driver Kit (WDK) headers. The target audience of this site is driver developers and kernel researches.

kdmapper. KDMapper is a simple tool that exploits iqvw64e.sys Intel driver to manually map non-signed drivers in memory

UnrealPakViewer. 查看 UE4 Pak 文件的图形化工具，支持 UE4 pak/ucas 文件

dnSpy-Unity-mono. Fork of Unity mono that's used to compile mono.dll with debugging support enabled

GameCheat. C++

TencentGameClientOpenCourse. 腾讯游戏客户端公开课2023 腾讯菁英班

NoOne. 一款windows64位的ark工具 rootkit

notepad-plus-plus. Notepad++ official repository

UnrealSDKDumper-4.25. Dump and generate usable SDK for VisualStudio

UEDumper. The most powerful Unreal Engine Dumper and Editor for UE 4.19 - 5.3

LKY_OfficeTools. 一键自动化 下载、安装、激活 Office 的利器。

pcileech. Direct Memory Access (DMA) Attack Software

GodOfHacker. 黑客神器

SteamTools. 🛠「Watt Toolkit」是一个开源跨平台的多功能 Steam 工具箱。

HowToCook. Programmer's guide about how to cook at home.

hacking-online-games. A curated list of tutorials/resources for hacking online games.

game-hacking. Tutorials, tools, and more as related to reverse engineering video games.

unicorn_pe. Unicorn PE is an unicorn based instrumentation project designed to emulate code execution for windows PE files.

gpt_academic. 为GPT/GLM等LLM大语言模型提供实用化交互接口，特别优化论文阅读/润色/写作体验，模块化设计，支持自定义快捷按钮&函数插件，支持Python和C++等项目剖析&自译解功能，PDF/LaTex论文翻译&总结功能，支持并行问询多种LLM模型，支持chatglm3等本地模型。接入通义千问, deepseekcoder, 讯飞星火, 文心一言, llama2, rwkv, claude2, moss等。

Windows-Hacker-Exp. 该资源主要参考甘迪文老师的《Windows黑客编程技术详解》书籍，作者从实践角度编写代码，希望对您有所帮助~

Hook. Ring3下的Inline Hook详细过程和注意事项

Microsoft-Activation-Scripts. Open-source Windows and Office activator featuring HWID, Ohook, TSforge, and Online KMS activation methods, along with advanced troubleshooting.

Cheating-Plugin-Program. 从零开始研究外挂设计原理 Study the principles of cheat design from scratch

AsmInjector. Simple AsmInject Tool

x64dbg. An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.

d810. Python

obsidian-releases. Community plugins list, theme list, and releases of Obsidian.

onscripter. onscripter collection

Kirikiroid2. C++

OnscripterYuri. An enhancement ONScripter project porting to many platforms, especially web.

ContextMenuManager. 🖱️ 纯粹的Windows右键菜单管理程序

Proxifier-Keygen. Proxifier注册机

XAppDebug. toggle app debuggable

tabby. A terminal for a more modern age

KeymouseGo. 类似按键精灵的鼠标键盘录制和自动化操作 模拟点击和键入 | automate mouse clicks and keyboard input

Micro8. Gitbook

ChinaMobilePhoneNumberRegex. Regular expressions that match the mobile phone number in mainland China. / 一组匹配中国大陆手机号码的正则表达式。

you-get. :arrow_double_down: Dumb downloader that scrapes the web

com.coderstory.toolkit. CorePatch / 核心破解

frida. Clone this repo to build Frida

LSPosed. LSPosed Framework

obs-studio. OBS Studio - Free and open source software for live streaming and screen recording

IDARustDemangler. Rust Demangler & Normalizer plugin for IDA

py3base92. 一个python3实现的base92编码python库 A python library to create base92 encoded strings in python3.

hexo-theme-aurora. 🏳️‍🌈 Futuristic auroral Hexo theme.

E-Decompiler. 用来辅助分析易语言程序的IDA插件

retdec. RetDec is a retargetable machine-code decompiler based on LLVM.

cheat-engine. Cheat Engine. A development environment focused on modding

GitHub520. :kissing_heart: 让你“爱”上 GitHub，解决访问时图裂、加载慢的问题。（无需安装）

python-dotenv. Reads key-value pairs from a .env file and can set them as environment variables. It helps in developing applications following the 12-factor principles.

flameshot. Powerful yet simple to use screenshot software :desktop_computer: :camera_flash:

Bilibili-Evolved. 强大的哔哩哔哩增强脚本

pythonguis-examples. Build desktop apps built with Python. Examples for PyQt6, PySide6, Flet, DearPyGUI, Kivy, NiceGUI, Streamlit, Tkinter, PyQt5 & PySide2

secguide. 面向开发人员梳理的代码安全指南

Tkinter-Designer. An easy and fast way to create a Python GUI 🐍

uncle-novel. Java

ShareX. ShareX is a free and open-source application that enables users to capture or record any area of their screen with a single keystroke. It also supports uploading images, text, and various file types to a wide range of destinations.

cutter. Free and Open Source Reverse Engineering Platform powered by rizin

resume. An elegant \LaTeX\ résumé template. 大陆镜像 https://gods.coding.net/p/resume/git

weblogicScanner. weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883

python-mini-projects. A collection of simple python mini projects to enhance your python skills

hashcat. World's fastest and most advanced password recovery utility

Awesome-Redteam. 一个攻防知识库。A knowledge base for red teaming and offensive security.

frp. A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

wpscan. WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com

ghidra. Ghidra is a software reverse engineering (SRE) framework

trivy. Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

ImHex. 🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

masscan. TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes.

hackingtool. ALL IN ONE Hacking Tool For Hackers

Magisk. The Magic Mask for Android

downkyi.

stable-diffusion-webui. Stable Diffusion web UI

SingleFile. Web Extension for saving a faithful copy of a complete web page in a single HTML file

DVWA. Damn Vulnerable Web Application (DVWA)

legado. Legado 3.0 Book Reader with powerful controls & full functions❤️阅读3.0, 阅读是一款可以自定义来源阅读网络内容的工具，为广大网络文学爱好者提供一种方便、快捷舒适的试读体验。

google-ctf. Google CTF

IDAGolangHelper. Python

Struts2VulsTools. Struts2系列漏洞检查工具

SSV2RayTrojanSSRClash. 2026 科学上网，ss, ssr, v2ray, trojan, clash, clashr，翻墙机场推荐

SSR-V2ray-Trojan-vpn. 免费机场公益机场收集/免费vpn-定时更新

xsscrapy. XSS spider - 66/66 wavsep XSS detected

penetration-suite-toolkit. 本项目制作的初衷是帮助师傅们快速搭建工作环境，工欲善其事，必先利其器。

ChatGLM2-6B. ChatGLM2-6B: An Open Bilingual Chat LLM | 开源双语对话语言模型

cve. Gather and update all available and newest CVEs with their PoC.

WeblogicTool. WeblogicTool，GUI漏洞利用工具，支持漏洞检测、命令执行、内存马注入、密码解密等（深信服深蓝实验室天威战队强力驱动）

ShiroAttack2. shiro反序列化漏洞综合利用（仅限授权测试使用）

ShiroExploit-Deprecated. Shiro550/Shiro721 一键化利用工具，支持多种回显方式

All-Defense-Tool. 本项目集成了全网优秀的攻防武器工具项目，包含自动化利用，子域名、目录扫描、端口扫描等信息收集工具，各大中间件、cms、OA漏洞利用工具，爆破工具、内网横向、免杀、社工钓鱼以及应急响应、甲方安全资料等其他安全攻防资料。

exphub. Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340

Behinder. “冰蝎”动态二进制加密网站管理客户端

traitor. :arrow_up: :skull_and_crossbones: :fire: Automatic Linux privesc via exploitation of low-hanging fruit e.g. gtfobins, pwnkit, dirty pipe, +w docker.sock

PEASS-ng. PEASS - Privilege Escalation Awesome Scripts SUITE (with colors)

vulnerability-list. 在渗透测试中快速检测常见中间件、组件的高危漏洞。

WeblogicScan. Weblogic一键漏洞检测工具，V1.5，更新时间：20200730

OA-EXPTOOL. OA综合利用工具，集合将近20款OA漏洞批量扫描

MDUT. MDUT - Multiple Database Utilization Tools

SharpSQLTools. SharpSQLTools 和@Rcoil一起写的小工具，可上传下载文件，xp_cmdshell与sp_oacreate执行命令回显和clr加载程序集执行相应操作。

SNETCracker. 超级弱口令检查工具是一款Windows平台的弱口令审计工具，支持批量多线程检查，可快速发现弱密码、弱口令账号，密码支持和用户名结合进行检查，大大提高成功率，支持自定义服务端口和字典。

kscan. Kscan是一款纯go开发的全方位扫描器，具备端口扫描、协议检测、指纹识别，暴力破解等功能。支持协议1200+，协议指纹10000+，应用指纹20000+，暴力破解协议10余种。

vulmap. Vulmap 是一款 web 漏洞扫描和验证工具, 可对 webapps 进行漏洞扫描, 并且具备漏洞验证功能

Active-Directory-Pentest-Notes. 个人域渗透学习笔记

Python. All Algorithms implemented in Python

free-programming-books-zh_CN. :books: 免费的计算机编程类中文书籍，欢迎投稿

free-programming-books. :books: Freely available programming books

nekoray. 不再维护，自寻替代品。 Qt based cross-platform GUI proxy configuration manager (backend: sing-box)

djc_helper. DNF蚊子腿小助手

GitHubDaily. 坚持分享 GitHub 上高质量、有趣实用的开源技术教程、开发者工具、编程网站、技术资讯。A list cool, interesting projects of GitHub.

GScan. 本程序旨在为安全应急响应人员对Linux主机排查时提供便利，实现主机侧Checklist的自动全面化检测，根据检测结果自动数据聚合，进行黑客攻击路径溯源。

jd-gui. A standalone Java Decompiler GUI

Apktool. A tool for reverse engineering Android apk files

wireshark. Read-only mirror of Wireshark's Git repository at https://gitlab.com/wireshark/wireshark. You're welcome to submit pull requests there.

HelloGitHub. :octocat: 分享 GitHub 上有趣、入门级的开源项目。Share interesting, entry-level open source projects on GitHub.

findcrypt-yara. IDA pro plugin to find crypto constants (and more)

ollvm-breaker. 使用Binary Ninja去除ollvm流程平坦混淆

go_parser. Yet Another Golang binary parser for IDAPro

latex-scnu. 华师毕业论文模板, 华师本科毕业论文模板, 华师论文模板, latex 模板, 毕业论文模板, SCNU, SCNU 论文模板, SCNU 本科论文模板

scnuthesis. 符合华南师范大学硕士/博士学位论文格式要求的LaTeX模板。

typora-latex-theme. 将Typora伪装成LaTeX的中文样式主题，本科生轻量级课程论文撰写的好帮手。This is a theme disguising Typora into Chinese LaTeX style.

hexo. A fast, simple & powerful blog framework, powered by Node.js.

foremost. Foremost is a console program to recover files based on their headers, footers, and internal data structures. This process is commonly referred to as data carving. Foremost can work on image files, such as those generated by dd, Safeback, Encase, etc, or directly on a drive. The headers and footers can be specified by a configuration file or you can use command line switches to specify built-in file types. These built-in types look at the data structures of a given file format allowing for a more reliable and faster recovery. Originally developed by the United States Air Force Office of Special Investigations and The Center for Information Systems Security Studies and Research , foremost has been opened to the general public. We welcome any comments, suggestions, patches, or feedback you have on this program. Please direct all correspondence to namikus@users.sf.net.

deflat. use angr to deobfuscation

UsbKeyboardDataHacker. USB键盘流量包取证工具 , 用于恢复用户的击键信息

404StarLink. 404StarLink - 推荐优质、有意义、有趣、坚持维护的安全开源项目

demovfuscator. A work-in-progress deobfuscator for movfuscated binaries

best-windows-apps. 推荐好用、优秀的 Windows 应用

CS-Notes. :books: 技术面试必备基础知识、Leetcode、计算机操作系统、计算机网络、系统设计

upx. UPX - the Ultimate Packer for eXecutables

ROPgadget. This tool lets you search your gadgets on your binaries to facilitate your ROP exploitation. ROPgadget supports ELF, PE and Mach-O format on x86, x64, ARM, ARM64, PowerPC, SPARC, MIPS, RISC-V 64, and RISC-V Compressed architectures.

pyinstxtractor. PyInstaller Extractor

netcat. NetCat for Windows

jadx. Dex to Java decompiler

ILSpy. .NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform!

dnSpy. .NET debugger and assembly editor

DIE-engine. DIE engine

binwalk. Firmware Analysis Tool

CyberChef. The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

antSword. 中国蚁剑是一款跨平台的开源网站管理工具。AntSword is a cross-platform website management toolkit.

metasploit-framework. Metasploit Framework

vulbase. 各大漏洞文库合集

fuzzDicts. You Know, For WEB Fuzzing !

xray. 一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

fscan. 一款内网综合扫描工具，方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)

OneForAll. OneForAll是一款功能强大的子域收集工具

RedTeamNotes. 红队笔记

RevokeMsgPatcher. :trollface: A hex editor for WeChat/QQ/TIM - PC版微信/QQ/TIM防撤回补丁（我已经看到了，撤回也没用了）

pycdc. C++ python bytecode disassembler and decompiler

feedback. Feedback & wiki for Snipaste https://snipaste.com

SteamAccountSwitcher. Quickly switch between Steam accounts from the tray

TrafficMonitor. 这是一个用于显示当前网速、CPU及内存利用率的桌面悬浮窗软件，并支持任务栏显示，支持更换皮肤。