awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
0xZ0F avatar

0xZ0F/Z0FCourse_ReverseEngineering

0
View on GitHub↗

Z0FCourse ReverseEngineering

This project is a structured course and instructional guide focused on x64 Windows reverse engineering. It provides a curriculum for analyzing and decompiling Windows binaries through the study of assembly language and operating system internals.

The material covers Windows binary analysis and malware analysis, with a specific focus on interpreting x64 machine code to recover original program logic. It guides the user through the process of tracing program behavior and logging function calls to understand how binaries operate.

The technical scope includes assembly-level decompilation, debugger-driven state inspection, and dynamic call tracing. It also covers instruction-based analysis, Windows API hooking, and x64 register mapping to monitor how software interacts with the system.

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI

Features

  • Reverse Engineering Tools - Offers a structured curriculum for analyzing and decompiling binaries through assembly and OS internals.
  • Reverse Engineering Courses - Provides a structured curriculum for analyzing and decompiling Windows binaries by studying assembly and OS internals.
  • Binary Analysis - Teaches how to analyze x64 executable files specifically for the Windows operating system.
  • Behavioral Tracing - Provides techniques for logging function calls and execution paths to observe program interaction with the system.
  • Binary Decompilation - Provides instructional material on translating x64 machine code into human-readable logic to reconstruct compiled programs.
  • Binary Execution Analysis - Instructs on logging function calls and tracing program behavior to understand binary operations.
  • Instruction Analysis Tools - Breaks down binary execution into assembly instruction sequences to map the program's logical flow.
  • x64 Assembly Analysis - Provides a guide to studying low-level x64 machine code to recover program logic from binaries.
  • Dynamic System Tracing - Guides users in logging function entry and exit points during runtime to identify active code paths.
  • Binary Analysis Tutorials - Ships instructional material on tracing program behavior and logging function calls in x64 binaries.
  • Windows Assembly Guides - Provides a guide to interpreting x64 machine code and reverse engineering software for Windows.
  • Windows System Hooks - Covers the interception of system calls between binaries and the Windows OS to monitor activity.
  • Malware Analysis - Applies reverse engineering techniques to investigate malicious software and its impact on Windows hosts.
  • Call Convention Analysis - Explains how to track x64 hardware registers to understand data passing in a 64-bit environment.
  • Execution State Debuggers - Teaches how to use debuggers to pause execution and inspect memory heaps and stack frames.
5,852 stars·584 forks·C++·AGPL-3.0·27 views

Star history

Star history chart for 0xz0f/z0fcourse_reverseengineeringStar history chart for 0xz0f/z0fcourse_reverseengineering

How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.

Projects sharing features with Z0FCourse ReverseEngineering

These projects share indexed features with Z0FCourse ReverseEngineering. Shared tags can include platform or build tooling; verify the primary use case before treating a result as a replacement.
  • morluto/reamorluto avatar

    morluto/rea

    440,840View on GitHub↗

    Rea is a reverse engineering toolkit that lets AI agents analyze software through a local Model Context Protocol server. An agent can investigate how an application works, from observed behavior and web traffic down to native binaries, and return findings with supporting evidence and stated limitations. All analysis runs on the user's own machine, so the inspected software is not uploaded and only tool results are passed to the agent. For native code, Rea drives an installed disassembler or decompiler such as Hopper, Ghidra, IDA, or Kuna to produce pseudocode, assembly, strings, symbols, and

    TypeScriptagent-skillsaiandroid
    View on GitHub↗440,840
  • mentebinaria/retoolkitmentebinaria avatar

    mentebinaria/retoolkit

    5,222View on GitHub↗

    Retoolkit is a reverse engineering tool orchestrator and malware analysis environment provisioner for Windows. It functions as a binary analysis workflow automator that installs and configures the specialized software toolchains required for security research. The project manages the execution and lifecycle of standalone analysis binaries through a registry-based Windows shell context menu. This integration allows users to launch external tools directly from the file system right-click menu by passing selected file paths as command line arguments to third-party executables. The system covers

    Inno Setupinno-setupmalware-analysisreverse-engineering
    View on GitHub↗5,222
  • mandiant/flare-flossmandiant avatar

    mandiant/flare-floss

    4,215View on GitHub↗

    Flare-floss is a security utility and static binary string extractor designed to uncover hidden text and configuration data within compiled binaries. It functions as an obfuscated string decoder and reverse engineering tool to translate encoded strings into readable text for security auditing. The project employs emulated execution to capture the decrypted state of strings in memory by running small chunks of binary code in a virtual CPU. It further utilizes static analysis disassembly, intermediate representation analysis, and heuristic-based pattern matching to identify and decode strings t

    Pythondeobfuscationflaregsoc-2026
    View on GitHub↗4,215
  • avast-tl/retdecavast-tl avatar

    avast-tl/retdec

    8,556View on GitHub↗

    Retdec is an LLVM-based machine code decompiler and static binary analysis tool designed for binary reverse engineering. It translates binary executable code into high-level representations to facilitate the reconstruction of program logic from compiled machine code. The system utilizes a retargetable frontend architecture and a multi-stage lifting pipeline to convert raw bytes into a common intermediate language. It differentiates custom program logic from known library code through signature-based identification and provides utilities for binary symbol demangling to restore human-readable n

    C++
    View on GitHub↗8,556
Compare all 30 related projects→

Frequently asked questions

What does 0xz0f/z0fcourse_reverseengineering do?

This project is a structured course and instructional guide focused on x64 Windows reverse engineering. It provides a curriculum for analyzing and decompiling Windows binaries through the study of assembly language and operating system internals.

What are the main features of 0xz0f/z0fcourse_reverseengineering?

The main features of 0xz0f/z0fcourse_reverseengineering are: Reverse Engineering Tools, Reverse Engineering Courses, Binary Analysis, Behavioral Tracing, Binary Decompilation, Binary Execution Analysis, Instruction Analysis Tools, x64 Assembly Analysis.

Which projects share features with 0xz0f/z0fcourse_reverseengineering?

Projects with overlapping indexed features include: morluto/rea — Rea is a reverse engineering toolkit that lets AI agents analyze software through a local Model Context Protocol… mentebinaria/retoolkit — Retoolkit is a reverse engineering tool orchestrator and malware analysis environment provisioner for Windows. It… mandiant/flare-floss — Flare-floss is a security utility and static binary string extractor designed to uncover hidden text and configuration… avast-tl/retdec — Retdec is an LLVM-based machine code decompiler and static binary analysis tool designed for binary reverse… radare/radare2 — radare2 is a reverse engineering framework and binary analysis toolset. It functions as a multi-architecture… aquynh/capstone — Capstone is a multi-architecture disassembly framework and binary translation system. It converts binary machine code…