Awesome GitHub RepositoriesControl Flow Logic Models

ILSpy is a .NET decompiler and binary analyzer designed to convert compiled .NET assemblies back into readable C# source code. It functions as a metadata explorer and a common intermediate language viewer, enabling the analysis of compiled code and the execution of reverse engineering workflows. The project distinguishes itself through specialized translation capabilities, such as converting compiled binary XML (BAML) back into human-readable XAML for user interface analysis. It also provides tools for inspecting native machine code and extracting metadata from program database (PDB) files.

Prepack is a build-time transformation tool and static analysis engine designed to optimize JavaScript source code. By executing code during the build process, it evaluates program logic and state to precompute results, effectively simplifying complex operations before the application is deployed. The tool functions as a bundle optimizer that integrates into existing development pipelines to refine application logic. It employs abstract interpretation and symbolic execution to track program behavior across various paths, allowing it to perform constant folding, eliminate unreachable code, and

PlantUML is a text-to-diagram generator that translates human-readable markup into structured graphical representations. It functions as a diagram-as-code tool, allowing users to create and maintain technical documentation, architectural models, and flowcharts by decoupling diagram content from visual layout. The project distinguishes itself through a comprehensive rendering pipeline that processes domain-specific markup into various output formats, including vector and raster graphics. It utilizes a graph-based layout engine to calculate spatial positioning, while a declarative styling layer

Angr is a binary analysis framework and static analysis tool used for reverse engineering compiled binaries. It serves as a binary decompiler and a lifting platform that translates machine code into a common intermediate representation to enable cross-architecture analysis. The framework integrates a symbolic execution engine and constraint solvers to determine the inputs required to reach specific program states. It also employs untrusted code sandboxing to isolate guest code from the host environment during analysis. Its capabilities cover control flow and data flow analysis, including the

RetDec is a reverse engineering framework and static binary analysis tool. Its primary purpose is to function as an LLVM-based machine code decompiler that translates binary machine code from multiple architectures into high-level C source code. The system employs a multi-stage lifting pipeline to recover program logic, using an intermediate representation to apply optimizations before emitting source code. It distinguishes itself through the ability to identify compilers and packers, perform executable unpacking, and reconstruct class hierarchies and original program structures. The framewo

Retdec is an LLVM-based machine code decompiler and static binary analysis tool designed for binary reverse engineering. It translates binary executable code into high-level representations to facilitate the reconstruction of program logic from compiled machine code. The system utilizes a retargetable frontend architecture and a multi-stage lifting pipeline to convert raw bytes into a common intermediate language. It differentiates custom program logic from known library code through signature-based identification and provides utilities for binary symbol demangling to restore human-readable n

Binaryen is a WebAssembly compiler toolchain and optimizer designed to transform, validate, and shrink binary modules. It provides a comprehensive intermediate representation framework that converts binary code into a single-assignment form to enable advanced program analysis and code transformation. The project includes a specialized transformation engine that applies iterative optimization passes to increase execution speed and reduce binary size. Additionally, it functions as a transpiler that translates WebAssembly binary modules into executable JavaScript for environments that lack nativ

This project is a collection of official toolsets and server implementations designed for the parsing, formatting, and semantic analysis of the Go programming language. It includes a language server that provides real-time code intelligence and automated editing capabilities to editors via the Language Server Protocol. The toolset provides a suite of utilities for source code formatting and static analysis. This includes automated standardization of code layout, import organization, and the generation of string representation methods for enumerated types. The project covers broad static anal

de4dot is a .NET deobfuscator, unpacker, and assembly analysis tool. It is designed to remove obfuscation layers, restore metadata, and simplify bytecode control flow to transform protected binaries back into human-readable code. The project features specialized systems for decrypting strings and constants using both static and dynamic analysis. It identifies specific protection tools through pattern-based detection and strips anti-analysis protections, such as tamper detection and anti-debugging code. The tool provides a suite of reverse engineering capabilities, including binary wrapper un

The agent-framework is an LLM agent orchestration framework and multi-agent workflow engine designed for building autonomous AI agents. It provides a tool integration layer for binding external functions, APIs, and sandboxed code as executable tools for language models. The framework distinguishes itself through a graph-based system for designing sequential and parallel task flows, featuring state management and checkpointing for long-running processes. It implements comprehensive conversational state management and an observability suite that uses telemetry to trace execution flows and monit

Cppcheck es una herramienta de análisis estático y linter para código fuente en C y C++ diseñada para detectar errores de programación, fugas de memoria y violaciones de seguridad sin ejecutar el programa. Funciona como un motor de detección de errores y herramienta de aseguramiento de calidad para identificar problemas de concurrencia, errores de conversión de tipos y cumplimiento de estándares de codificación segura. El proyecto proporciona una interfaz gráfica de usuario para seleccionar archivos y revisar errores, junto con un linter para imponer convenciones de nomenclatura y estándares de codificación. Soporta la creación de reglas de análisis personalizadas utilizando expresiones regulares para identificar patrones de codificación específicos. La herramienta incluye capacidades para análisis incremental, supresión de advertencias y exclusión de archivos para gestionar grandes codebases. También cuenta con generación de informes HTML e integración con editores como VS Code para proporcionar identificación de errores durante el desarrollo.

Fernflower es un descompilador de bytecode de Java y una herramienta de ingeniería inversa. Transforma archivos de clase de Java compilados de nuevo en código fuente de Java legible por humanos para reconstruir la lógica original del programa y los nombres de las variables. La herramienta funciona como un procesador de bytecode de línea de comandos capaz de procesar por lotes archivos de archivo Java y archivos de clase. Maneja específicamente el análisis de código ofuscado renombrando identificadores ambiguos y resolviendo conflictos de nombres para hacer que el código fuente resultante sea más fácil de seguir. El sistema emplea análisis estático para convertir bytecode a fuente, utilizando la extracción de información de depuración para restaurar los nombres de las variables locales. Reconstruye estructuras de programas a través del análisis de grafos de flujo de control, inferencia de tipos y la generación de un árbol de sintaxis abstracta.

python-uncompyle6 is a Python bytecode decompiler and reverse engineering tool designed to convert compiled bytecode files back into human-readable source code. It functions as a source code recoverer and bytecode disassembler, allowing for the analysis of internal program logic and the reconstruction of original language constructs. The tool provides cross-version support, enabling the analysis and recovery of source code from bytecode created across multiple different versions of the Python interpreter. This allows it to operate as a cross-version bytecode analyzer that can interpret varied

Diaphora es una herramienta de comparación binaria y motor de similitud diseñado para comparar binarios compilados e identificar secciones de código cambiadas o coincidentes. Funciona como un complemento de ingeniería inversa que mapea las relaciones entre funciones y detecta unidades de compilación utilizando análisis de ensamblador y teoría de grafos. El proyecto se especializa en el análisis de parches de vulnerabilidad, lo que permite a los usuarios detectar correcciones de seguridad comparando diferentes versiones de un binario. Sincroniza metadatos de análisis, como nombres de símbolos y comentarios, entre binarios y genera parches comparando pseudocódigo descompilado. El motor utiliza grafos de flujo de control y coincidencia heurística para calcular índices de similitud entre funciones. Sus capacidades más amplias incluyen el mapeo de grafos de llamadas, la identificación de límites de archivos de objetos y la gestión del estado de análisis a través de una base de datos relacional para facilitar la referencia cruzada a gran escala.

Fernflower is a Java bytecode decompiler designed to convert compiled Java class files back into human-readable source code. It functions as a bytecode analysis tool that recovers original program logic and structure from compiled binaries. The project includes capabilities for obfuscated identifier resolution to rename ambiguous member elements, ensuring clear identifiers in the resulting source. These features support the analysis of obfuscated code, legacy code recovery, and Java malware analysis for security auditing. The system utilizes a structural analysis pipeline that includes contr

SpotBugs is a static analysis tool and bytecode analyzer for Java applications. It scans compiled class files to identify bugs, security vulnerabilities, and performance issues without executing the code. The system functions as both a bug detector and a static application security testing tool to locate logical errors and API misuse. The project distinguishes itself through a plugin-based detector architecture that allows the integration of external libraries to add custom detection rules. It provides specialized security auditing for vulnerabilities such as SQL injection, cross-site scripti

ConfuserEx is a security toolset for .NET applications that functions as a code obfuscator, binary encryptor, and application protector. Its primary purpose is to prevent reverse engineering by hiding sensitive application logic and data. The project employs specific hardening techniques including symbol renaming to hinder human readability and control-flow mutation to confuse decompilers. It further protects binaries by encrypting constants and resources to stop static analysis and memory dumping, while blocking the use of debuggers and profilers to prevent runtime analysis. Additional capa

http-decision-diagram is a set of decision-making tools and visual logic diagrams used to resolve HTTP protocol behaviors, status codes, and cache eligibility. It functions as a status code resolver and cache eligibility evaluator, utilizing logic diagrams to determine correct responses based on web specifications. The project employs a rule-based decision tree and conditional flow modeling to translate combinations of request and response headers into deterministic status code outcomes. This specification-mapped logic allows for the evaluation of header-driven state resolution through a stru

Robot is a functional and immutable finite state machine library for managing declarative application states and transitions. It utilizes an immutable state transition engine where next states and side effects are computed through pure functions operating on immutable data structures without any side-effect mutations. States and allowed transitions are mapped in a declarative state table definition, making the overall state machine logic readable and inspectable. The library connects finite state machines directly to component rendering engines through component reactive bindings, ensuring th