Awesome GitHub RepositoriesDevelopment Libraries

CyberChef is a web-based application designed for performing complex data encoding, decoding, encryption, and analysis tasks. It provides a visual interface where users construct data transformation pipelines by chaining modular operations together, allowing raw input to be processed into a desired output format entirely within the local browser environment. The tool functions as a client-side cryptographic workbench, ensuring that all data processing logic remains local to the user's machine to maintain privacy and eliminate server-side overhead. By utilizing functional pipeline composition

radare2 is a reverse engineering framework and binary analysis toolset. It functions as a multi-architecture disassembler, low-level binary debugger, and hexadecimal editor for inspecting executable structures and interpreting machine code when original source files are unavailable. The framework provides capabilities for decompiling machine instructions, performing symbolic analysis, and diffing binary files to identify structural changes across versions. It also includes a digital forensic analyzer and disk analyzer for browsing filesystem formats in userland. The toolset supports binary p

This project is an embedded C++ development kit and hardware abstraction layer that enables the Arduino programming environment to target ESP8266 WiFi microcontrollers. It provides a comprehensive framework for compiling and flashing code to microcontroller memory via serial or wireless interfaces. The system includes a specialized WiFi microcontroller framework for managing TCP/IP stacks and internet connectivity. It features a dedicated over-the-air firmware update system that allows software updates to be delivered to remote hardware without a physical cable connection. The kit covers emb

libui is a native C GUI library and cross-platform framework used to build desktop applications. It provides a unified C abstraction layer and a native widget toolkit that maps directly to the host operating system's original controls, windows, and menu bars. The project functions as a portable UI wrapper, employing platform-specific backends and a native-API wrapper to maintain visual and behavioral fidelity across different operating systems. It utilizes a C-language binding layer to ensure portability across various compilers and targets. The library covers native interface construction a

Angr is a binary analysis framework and static analysis tool used for reverse engineering compiled binaries. It serves as a binary decompiler and a lifting platform that translates machine code into a common intermediate representation to enable cross-architecture analysis. The framework integrates a symbolic execution engine and constraint solvers to determine the inputs required to reach specific program states. It also employs untrusted code sandboxing to isolate guest code from the host environment during analysis. Its capabilities cover control flow and data flow analysis, including the

Volatility is a memory forensics framework and digital forensics tool designed to extract and analyze evidence from volatile computer memory dumps. It functions as a memory dump parser and analysis platform used to identify running processes, network connections, and loaded modules from a system RAM capture. The framework enables the reconstruction of system state to uncover malicious activity, such as rootkits and injected code, during malware incident response and threat hunting. It provides capabilities for digital forensic investigations to detect unauthorized access and indicators of com

ArduinoJson is a C++ library for parsing and manipulating JSON data and MessagePack binary streams on microcontrollers with limited memory and processing power. It provides the core primitives necessary for embedded data serialization and parsing, enabling devices to exchange structured data over serial or network interfaces. The library is distinguished by its focus on microcontroller memory management, employing strategies such as pool-based allocation, string deduplication, and non-owning string views to minimize RAM usage. It further optimizes for constrained environments by allowing cons

Al-Khaser is a research project focused on the development of anti-analysis and evasion techniques to resist reverse engineering. It provides implementations for detecting and evading virtual machines, sandboxes, and debuggers to prevent software analysis. The project implements control flow obfuscation through anti-disassembly methods and utilizes dynamic API resolution to bypass static import tables. It further hinders forensic analysis by manipulating memory headers to prevent process dumps and utilizing remote code injection to execute logic in external processes. The capability surface

Detours is a library for intercepting Win32 API calls and redirecting function calls at runtime on Windows, enabling binary-level instrumentation without requiring access to the original source code. It functions as an API hooking library and binary instrumentation toolkit, allowing developers to monitor or modify the behavior of compiled Windows binaries by hooking into their function execution paths. The project achieves this through detour-based function interception, where the first few instructions of a target function are replaced with a jump to a user-supplied detour function, while pr

The Minimalistic x86/x64 API Hooking Library for Windows

Este proyecto es un simulador y visualizador educativo interactivo de blockchain. Sirve como herramienta para demostrar cómo se minan y encadenan los bloques mediante hashing criptográfico y prueba de trabajo (proof of work). La aplicación se centra en la simulación de un registro distribuido, permitiendo a los usuarios visualizar la estructura interna de un registro inmutable. Demuestra específicamente el proceso de minería de bloques, donde se debe encontrar un nonce válido para cumplir con un umbral de dificultad de minería ajustable. El sistema cubre la visualización de operaciones de registro, encadenamiento de bloques criptográficos y actualizaciones de hash en tiempo real para ilustrar la integridad de los datos. Toda la aplicación se proporciona como una aplicación web dockerizada para asegurar un despliegue consistente en diferentes entornos de alojamiento.

Blackbone es una colección de herramientas especializadas para escaneo de memoria, inyección de procesos e interfaces de controladores de kernel utilizadas para manipular el entorno de ejecución de Windows. Proporciona un framework para ejecutar código remoto, mapear imágenes ejecutables portátiles y gestionar hilos a través de diferentes límites de procesos. El proyecto incluye un controlador de memoria de kernel para acceder a la memoria del kernel y modificar derechos de manejo para ocultar asignaciones de la detección en modo usuario. También cuenta con una librería para interceptar llamadas a funciones en procesos remotos usando interrupciones de software y puntos de interrupción de hardware. El kit de herramientas cubre capacidades más amplias en la manipulación de memoria virtual, como leer, escribir y asignar memoria en procesos locales o remotos. Además, proporciona utilidades para la búsqueda de patrones de memoria para localizar secuencias de bytes específicas y gestión de módulos para inyectar o expulsar binarios.

sw-precache es un generador de precaché de service worker utilizado para crear scripts que permiten la funcionalidad offline para aplicaciones web. Actúa como un gestor de caché de activos en tiempo de compilación que aplica hash a archivos estáticos y gestiona su versionado dentro de una caché de service worker. El proyecto proporciona un configurador de caché en tiempo de ejecución para definir estrategias de caché y manejadores de solicitudes para contenido dinámico basado en patrones de URL. También incluye un manejador de respaldo offline para interceptar fallos de red y servir páginas de respaldo en caché. El conjunto de herramientas cubre la generación de código de service worker y manifiestos, versionado basado en hash de contenido y la interceptación de eventos de fetch. Proporciona una interfaz de línea de comandos para generar archivos de service worker utilizando archivos de configuración y flags personalizados.

This repository is the Armbian build framework — an embedded Linux build system for generating custom operating system images tailored to single-board computers, primarily targeting ARM and RISC-V architectures. The build process is orchestrated by GNU Makefiles and relies on a chroot-based environment to assemble the root filesystem, manage cross-compilation toolchains, and aggregate binary firmware blobs for hardware compatibility. Kernel and bootloader source trees are fetched via git, with structured patches applied in a controlled sequence, while each supported board is described by a ded

ReShade is a post-processing shader injector that hooks into DirectX, OpenGL, and Vulkan rendering pipelines to apply custom shaders in real time. It operates by injecting a DLL into the target process, intercepting graphics API calls, and inserting a configurable pipeline of user-selected shader effects that read color and depth buffers to alter the final output. The project distinguishes itself through depth buffer auto-detection, which automatically identifies the depth-stencil attachment in the rendering pipeline, enabling per-pixel depth effects such as ambient occlusion and depth-of-fie

The LK kernel is an SMP-aware kernel designed for small systems ported to a variety of platforms and cpu architectures.

Service Worker Toolbox provides some simple helpers for use in creating your own service workers. Specifically, it provides common caching strategies for dynamic content, such as API calls, third-party resources, and large or infrequently used local resources that you don't want precached.

WiringPi is a GPIO hardware control library and embedded hardware interface designed for managing General Purpose Input Output pins on single board computers. It provides a standardized software layer for interacting with hardware registers, facilitating low-latency pin manipulation. The project includes a GPIO command line interface that allows users to inspect pin states and manage hardware input and output levels directly from the terminal. It supports embedded hardware prototyping and hardware state monitoring, specifically targeting Raspberry Pi boards to interact with external electron

Simple .INI file parser in C, good for embedded systems

Cecil is a library to inspect, modify and create .NET programs and libraries.