Awesome GitHub RepositoriesBinary Disassembly

Acest proiect este un ghid tehnic cuprinzător și un curs axat pe reverse engineering-ul aplicațiilor iOS. Servește ca manual pentru disecarea binarilor mobile folosind instrumente de dezasamblare și debugging pentru a analiza logica și comportamentul intern al aplicațiilor. Materialul funcționează ca referință pentru teoriile ARM assembly și Objective-C, oferind framework-ul necesar pentru a traduce codul mașină de nivel jos în logică lizibilă pentru oameni. Combină studiul teoretic cu exerciții practice pentru a valida utilizarea instrumentelor de reverse engineering pe binare din lumea reală. Domeniul de aplicare acoperă analiza statică a binarilor, debugging-ul runtime dinamic și studiul arhitecturii sistemului iOS. Aceasta include maparea ierarhiei sistemului de fișiere și organizarea datelor pentru a localiza asset-urile aplicației și fișierele de configurare.

HyperDbg is a hardware-assisted kernel-mode debugging platform that leverages virtualization to monitor and control system execution. By utilizing hypervisor-level primitives, it enables deep system analysis and instrumentation without relying on standard operating system debugging interfaces. The framework provides a comprehensive environment for inspecting both kernel and user-mode processes, allowing for granular control over execution flow and system state. The project distinguishes itself through a transparent debugging layer designed to remain invisible to the target environment. It emp

APKLab is an integrated security analysis platform and reverse engineering IDE for Android applications. It provides a unified environment for decompiling binaries into source code, repackaging modified applications into signed installers, and performing comprehensive security analysis. The platform distinguishes itself by combining static and dynamic analysis workflows. It enables the injection of runtime hooks and gadget libraries to monitor application behavior, while providing specialized patching capabilities to intercept and decrypt encrypted network traffic via a proxy. The toolkit co

PE-bear is a graphical portable executable analysis tool designed for inspecting, disassembling, and modifying the structure of Windows PE binary files. It functions as a static analysis framework used to identify malicious patterns and reverse engineer program logic. The project provides a binary diffing tool to identify structural and content differences between two executable files. It also includes a section editor for modifying binary layouts by adding or altering sections and imports. The tool covers a range of binary analysis capabilities, including machine code disassembly, file layo