Easily retargetable and hackable interactive disassembler with IDAPython-compatible plugin API
Binwalk is a firmware analysis and reverse engineering tool designed to identify, extract, and analyze embedded files and data types within binary firmware blobs. It functions as a binary file signature scanner and entropy analyzer to decompose firmware images into their constituent components. The tool distinguishes itself by combining signature-based pattern matching for known binary headers with entropy analysis. By calculating data randomness across file offsets, it can locate compressed or encrypted sections that do not possess known signatures. The project covers binary data forensics
dnSpy is a specialized toolset for the reverse engineering, analysis, and modification of compiled .NET binaries. It functions as a decompiler that converts assemblies back into readable high-level source code, an assembly editor for modifying bytecode and metadata, and a debugger for inspecting compiled binaries. The project integrates a hex editor specifically for inspecting and modifying raw bytes and Common Intermediate Language structures. It allows for the direct modification of binary contents to change application behavior without requiring the original project source files. The tool
Snowman decompiler
The main features of yegord/snowman are: Decompilation Tools, IDA Pro Plugins, Reverse Engineering Tools.
Open-source alternatives to yegord/snowman include: refirmlabs/binwalk — Binwalk is a firmware analysis and reverse engineering tool designed to identify, extract, and analyze embedded files… pfalcon/scratchabit — Easily retargetable and hackable interactive disassembler with IDAPython-compatible plugin API. ohjeongwook/darungrim — A patch analysis tool. 0xd4d/dnspy — dnSpy is a specialized toolset for the reverse engineering, analysis, and modification of compiled .NET binaries. It… 0xnobody/vmpdump — A dynamic VMP dumper and import fixer, powered by VTIL. 0xnobody/vmpattack.
