Awesome GitHub RepositoriesDevelopment Libraries

CyberChef is a web-based application designed for performing complex data encoding, decoding, encryption, and analysis tasks. It provides a visual interface where users construct data transformation pipelines by chaining modular operations together, allowing raw input to be processed into a desired output format entirely within the local browser environment. The tool functions as a client-side cryptographic workbench, ensuring that all data processing logic remains local to the user's machine to maintain privacy and eliminate server-side overhead. By utilizing functional pipeline composition

radare2 is a reverse engineering framework and binary analysis toolset. It functions as a multi-architecture disassembler, low-level binary debugger, and hexadecimal editor for inspecting executable structures and interpreting machine code when original source files are unavailable. The framework provides capabilities for decompiling machine instructions, performing symbolic analysis, and diffing binary files to identify structural changes across versions. It also includes a digital forensic analyzer and disk analyzer for browsing filesystem formats in userland. The toolset supports binary p

This project is an embedded C++ development kit and hardware abstraction layer that enables the Arduino programming environment to target ESP8266 WiFi microcontrollers. It provides a comprehensive framework for compiling and flashing code to microcontroller memory via serial or wireless interfaces. The system includes a specialized WiFi microcontroller framework for managing TCP/IP stacks and internet connectivity. It features a dedicated over-the-air firmware update system that allows software updates to be delivered to remote hardware without a physical cable connection. The kit covers emb

libui is a native C GUI library and cross-platform framework used to build desktop applications. It provides a unified C abstraction layer and a native widget toolkit that maps directly to the host operating system's original controls, windows, and menu bars. The project functions as a portable UI wrapper, employing platform-specific backends and a native-API wrapper to maintain visual and behavioral fidelity across different operating systems. It utilizes a C-language binding layer to ensure portability across various compilers and targets. The library covers native interface construction a

Angr is a binary analysis framework and static analysis tool used for reverse engineering compiled binaries. It serves as a binary decompiler and a lifting platform that translates machine code into a common intermediate representation to enable cross-architecture analysis. The framework integrates a symbolic execution engine and constraint solvers to determine the inputs required to reach specific program states. It also employs untrusted code sandboxing to isolate guest code from the host environment during analysis. Its capabilities cover control flow and data flow analysis, including the

Volatility is a memory forensics framework and digital forensics tool designed to extract and analyze evidence from volatile computer memory dumps. It functions as a memory dump parser and analysis platform used to identify running processes, network connections, and loaded modules from a system RAM capture. The framework enables the reconstruction of system state to uncover malicious activity, such as rootkits and injected code, during malware incident response and threat hunting. It provides capabilities for digital forensic investigations to detect unauthorized access and indicators of com

ArduinoJson is a C++ library for parsing and manipulating JSON data and MessagePack binary streams on microcontrollers with limited memory and processing power. It provides the core primitives necessary for embedded data serialization and parsing, enabling devices to exchange structured data over serial or network interfaces. The library is distinguished by its focus on microcontroller memory management, employing strategies such as pool-based allocation, string deduplication, and non-owning string views to minimize RAM usage. It further optimizes for constrained environments by allowing cons

Al-Khaser is a research project focused on the development of anti-analysis and evasion techniques to resist reverse engineering. It provides implementations for detecting and evading virtual machines, sandboxes, and debuggers to prevent software analysis. The project implements control flow obfuscation through anti-disassembly methods and utilizes dynamic API resolution to bypass static import tables. It further hinders forensic analysis by manipulating memory headers to prevent process dumps and utilizing remote code injection to execute logic in external processes. The capability surface

Detours is a library for intercepting Win32 API calls and redirecting function calls at runtime on Windows, enabling binary-level instrumentation without requiring access to the original source code. It functions as an API hooking library and binary instrumentation toolkit, allowing developers to monitor or modify the behavior of compiled Windows binaries by hooking into their function execution paths. The project achieves this through detour-based function interception, where the first few instructions of a target function are replaced with a jump to a user-supplied detour function, while pr

The Minimalistic x86/x64 API Hooking Library for Windows

This project is an interactive blockchain educational simulator and visualizer. It serves as a tool for demonstrating how blocks are mined and chained through cryptographic hashing and proof of work. The application focuses on the simulation of a distributed ledger, allowing users to visualize the internal structure of an immutable record. It specifically demonstrates the process of block mining, where a valid nonce must be found to meet an adjustable mining difficulty threshold. The system covers the visualization of ledger operations, cryptographic block chaining, and real-time hash update

Blackbone ist eine Sammlung spezialisierter Tools für Speicherscans, Prozessinjektion und Kernel-Treiber-Schnittstellen, die zur Manipulation der Windows-Ausführungsumgebung verwendet werden. Es bietet ein Framework für die Ausführung von Remote-Code, das Mapping von Portable-Executable-Images und die Verwaltung von Threads über verschiedene Prozessgrenzen hinweg. Das Projekt enthält einen Kernel-Speichertreiber für den Zugriff auf den Kernelspeicher und die Änderung von Handle-Rechten, um Allokationen vor der Erkennung im User-Mode zu verbergen. Zudem bietet es eine Bibliothek zum Abfangen von Funktionsaufrufen in Remote-Prozessen mittels Software-Interrupts und Hardware-Breakpoints. Das Toolkit deckt umfassendere Funktionen der virtuellen Speichermanipulation ab, wie das Lesen, Schreiben und Allokieren von Speicher in lokalen oder Remote-Prozessen. Es bietet zudem Utilities für die Suche nach Speichermustern, um spezifische Byte-Sequenzen zu lokalisieren, sowie ein Modulmanagement für das Injizieren oder Entfernen von Binärdateien.

sw-precache ist ein Service-Worker-Precache-Generator, der verwendet wird, um Skripte zu erstellen, die Offline-Funktionalität für Webanwendungen ermöglichen. Er fungiert als Asset-Cache-Manager zur Build-Zeit, der statische Dateien hasht und deren Versionierung innerhalb eines Service-Worker-Caches verwaltet. Das Projekt bietet einen Runtime-Cache-Konfigurator zur Definition von Caching-Strategien und Request-Handlern für dynamische Inhalte basierend auf URL-Mustern. Es enthält zudem einen Offline-Fallback-Handler, um Netzwerkfehler abzufangen und zwischengespeicherte Fallback-Seiten bereitzustellen. Das Toolset deckt die Generierung von Service-Worker-Code und Manifesten, Content-Hash-basierte Versionierung sowie das Abfangen von Fetch-Ereignissen ab. Es bietet eine Kommandozeilenschnittstelle zur Generierung von Service-Worker-Dateien unter Verwendung von Konfigurationsdateien und benutzerdefinierten Flags.

This repository is the Armbian build framework — an embedded Linux build system for generating custom operating system images tailored to single-board computers, primarily targeting ARM and RISC-V architectures. The build process is orchestrated by GNU Makefiles and relies on a chroot-based environment to assemble the root filesystem, manage cross-compilation toolchains, and aggregate binary firmware blobs for hardware compatibility. Kernel and bootloader source trees are fetched via git, with structured patches applied in a controlled sequence, while each supported board is described by a ded

ReShade is a post-processing shader injector that hooks into DirectX, OpenGL, and Vulkan rendering pipelines to apply custom shaders in real time. It operates by injecting a DLL into the target process, intercepting graphics API calls, and inserting a configurable pipeline of user-selected shader effects that read color and depth buffers to alter the final output. The project distinguishes itself through depth buffer auto-detection, which automatically identifies the depth-stencil attachment in the rendering pipeline, enabling per-pixel depth effects such as ambient occlusion and depth-of-fie

The LK kernel is an SMP-aware kernel designed for small systems ported to a variety of platforms and cpu architectures.

Service Worker Toolbox provides some simple helpers for use in creating your own service workers. Specifically, it provides common caching strategies for dynamic content, such as API calls, third-party resources, and large or infrequently used local resources that you don't want precached.

WiringPi is a GPIO hardware control library and embedded hardware interface designed for managing General Purpose Input Output pins on single board computers. It provides a standardized software layer for interacting with hardware registers, facilitating low-latency pin manipulation. The project includes a GPIO command line interface that allows users to inspect pin states and manage hardware input and output levels directly from the terminal. It supports embedded hardware prototyping and hardware state monitoring, specifically targeting Raspberry Pi boards to interact with external electron

Simple .INI file parser in C, good for embedded systems

Cecil is a library to inspect, modify and create .NET programs and libraries.