Tool · reverse-engineeringdual-uselicencepassive
Ghidra RPC
Agent skill plus CLI daemon that keeps Ghidra warm in-process via PyGhidra and returns JSON, so any shell-capable coding assistant can decompile, navigate, annotate, retype, patch and diff binaries without a human in the loop.
Use responsibly
Dual-use security content. We link to the upstream project rather than re-hosting ready-to-fire files. Use only in authorized security testing.
More tools
- de4pyreverse-engineeringA Python deobfuscator and analysis toolkit for malware analysts and reverse engineers, featuring an LLM-assisted deobfuscation engine (via Ollama), legacy deobfuscators (Jawbreaker, BlankOBF), a packer/metadata analyzer, process monitoring, and a PySide6 GUI. Licensed CC BY-NC 4.0 (non-commercial).
- agent-chaperoneagent-guardrailApache-2.0 MCP proxy and Claude Code hooks adapter that screens an agent's tool calls before they run and tool results before it reads them against thresholds in a policy file; log-only by default, needs a TypeSafe API key.
- AI Vuln Scannerdast/web-app-scannerA security research CLI that automates web-application vulnerability scanning with OWASP ZAP (spider + active attack) and uses the Anthropic Claude API to analyze findings and generate Markdown remediation reports. Ships an intentionally vulnerable Flask app as a safe test target.
- Aktoapi-securityOpen-source API-security platform with a large BOLA/IDOR/broken-auth test library, usable as an independent authorization cross-check.
- AmassreconDeep passive subdomain enumeration across many public sources.
- ArjundiscoveryDiscovers hidden HTTP parameters using a bundled (SecLists-upsizable) wordlist.