Awesome GitHub RepositoriesDeobfuscation Tools

Jadx is a comprehensive Java decompilation suite designed to transform compiled binary application files into readable source code. It functions as a static analysis workbench, providing a graphical interface for navigating, searching, and inspecting the internal logic of complex software packages. By utilizing a bytecode-to-Java pipeline, the project reconstructs high-level logical structures from low-level binary instructions, making it a primary tool for Android application reverse engineering. The project distinguishes itself through a sophisticated control flow reconstruction engine and

de4dot is a .NET deobfuscator, unpacker, and assembly analysis tool. It is designed to remove obfuscation layers, restore metadata, and simplify bytecode control flow to transform protected binaries back into human-readable code. The project features specialized systems for decrypting strings and constants using both static and dynamic analysis. It identifies specific protection tools through pattern-based detection and strips anti-analysis protections, such as tamper detection and anti-debugging code. The tool provides a suite of reverse engineering capabilities, including binary wrapper un

JPEX Software is a comprehensive reverse engineering suite for SWF binary files, serving as an ActionScript decompiler and editor. It provides a toolkit for decompiling, analyzing, and modifying the internal structure of compiled Flash content, including the extraction of scripts and media assets. The project is distinguished by its ability to perform direct binary modification, allowing users to edit bytecode and replace embedded resources without reverting to high-level source code. It includes a runtime ActionScript bytecode debugger for variable inspection and call stack analysis, as well

This project is a comprehensive Android reverse engineering suite that functions as a decompiler, bytecode deobfuscator, and malware analysis tool. It is designed to convert APK, DEX, and OAT binaries into human-readable source code using a native implementation that does not require a Java Virtual Machine. The platform is distinguished by its integration with Frida for dynamic analysis, allowing users to hook methods, inject custom JavaScript, and dump device memory in real time. It also features specialized security engines, including a taint propagation engine and a stack-state machine, to

Simplify هو بيئة تجريبية (sandbox) لجهاز Android الافتراضي، ومتتبع لتنفيذ الـ bytecode، وإطار عمل للتحليل الساكن. يعمل كأداة لإزالة التشويش (deobfuscator) عن الـ Dalvik bytecode المصممة لاستعادة كود قابل للقراءة من الملفات الثنائية عبر محاكاة سلوك البرنامج دون الحاجة لجهاز فعلي. يتميز المشروع باستخدام تحليل مخطط التنفيذ لحل استدعاءات الانعكاس (reflection) وتبسيط الكود المشوش من خلال نشر الثوابت وإزالة الكود الميت. ويستخدم محاكاة التنفيذ متعدد المسارات لتتبع جميع نتائج الفروع الشرطية الممكنة ورسم تدفق التعليمات لتحديد القيم الثابتة. يغطي النظام نطاقاً واسعاً من قدرات التحليل، بما في ذلك تتبع انتشار الاستثناءات، وتصنيف الآثار الجانبية للطرق (methods)، ومحاكاة استدعاءات Java API. كما يوفر آليات لاعتراض تنفيذ الطرق عبر خطافات (hooks) مخصصة لمراقبة أو تجاوز حالات الجهاز الافتراضي.