reverse-engineering

A Python deobfuscator and analysis toolkit for malware analysts and reverse engineers, featuring an LLM-assisted deobfuscation engine (via Ollama), legacy deobfuscators (Jawbreaker, BlankOBF), a packer/metadata analyzer, process monitoring, and a PySide6 GUI. Licensed CC BY-NC 4.0 (non-commercial).

Agent skill plus CLI daemon that keeps Ghidra warm in-process via PyGhidra and returns JSON, so any shell-capable coding assistant can decompile, navigate, annotate, retype, patch and diff binaries without a human in the loop.

Kali-based Docker environment with 50+ RE tools, an MCP-connected Binary Ninja or Ghidra backend, and an orchestrator skill that lets Claude Code or Codex CLI turn a binary into a case directory of ranked evidence and hypotheses.

Claude Code skill pack wrapping Ghidra, YARA, CAPA, Frida, FakeNet and an 18-service threat-intel client behind Docker and VMware isolation, for static, dynamic and web-forensic malware analysis on Windows.

Agent skills for defensive malware analysis (re-ioc-extraction and re-unpacker), shipped for both Claude Code and OpenAI Codex, for evidence-first IOC extraction and static-first unpacking plans.

The OWASP Mobile Application Security Testing Guide: a comprehensive manual for mobile app security testing and reverse engineering on Android and iOS. Covers static and dynamic analysis, runtime and network-traffic analysis, cryptography testing, and mobile penetration-testing methodology, mapped to the OWASP MASVS standard and MASWE weakness enumeration.

A curated reference collection by iOS security researcher Siguza covering ARM architecture, Mach-O internals, sandboxing/IPC, kernel design, and iOS mitigations (KTRR, PPL, SPRR, PAN, PAC, MTE), alongside write-ups of real iOS vulnerabilities and exploitation chains. It links primarily to vendor docs, academic papers, and post-mortem research.

A curated collection of hacking, penetration-testing, and AI red-teaming learning resources: educational courses, YouTube channels, skill-building platforms (HackTheBox, TryHackMe, CTFs), reverse-engineering/privesc/OSINT/malware-analysis training, vulnerable practice apps, exploit databases, and pentest distros (Kali, ParrotOS, BlackArch).