Screenshots
Example Usage
┌──────────────────────┐
│ Triage │
│ enumerate, classify,│
│ build call graph, │
│ match signatures │
└──────────┬───────────┘
│
▼
┌────────────────┼────────────────┐
│ │ │
▼ ▼ ▼
┌──────────────┐ ┌──────────────┐ ┌──────────────┐
│ Analyze │ │ Analyze │ │ ... │
│ (leaf fns) │ │ (next tier) │ │ │
└──────┬───────┘ └──────┬───────┘ └──────┬───────┘
│ │ │
└────────┬───────┴────────────────┘
│
▼
┌──────────────────────┐
│ Cleanup │
│ normalize, dedupe │
└──────────┬───────────┘
│
▼
┌──────────────────────┐
│ Synthesis │
│ unify names, build │
│ structs, deobfuscate│
└─────────
See also
ret-sync
Open Source
ret-sync is a set of plugins that helps to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg2…
.NET-Obfuscator
Open Source
Lists of .NET Obfuscator (Free, Freemium, Paid and Open Source )…
Frida
Open Source
Kali
Dynamic instrumentation toolkit for developers, reverse engineers, and security researchers. Injects…
Ghidra
Open Source
Kali
NSA-developed software reverse engineering suite. Features a disassembler, decompiler, scripting (Ja…
AndKittyInjector
Open Source
Inject a shared library into a process using ptrace…
IDA Pro
Paid
The industry-standard disassembler and decompiler (with Hex-Rays decompiler). Supports the widest ra…