Curated APK and IPA analysis, Dynamic instrumentation updates for developers and security researchers. 10 relevant releases and technical developments with o… This page links to original publishers, uses short excerpts, and does not reproduce complete articles.
Co-op Anything: point your AI agent at any single-player game and play it with friends (online and/or splitscreen!). MCP server and playbook to let you reverse engineer, fix, test, ship and share what it learns. GitHub discovery signal: 600 stars, 59 forks, 46 open issues; language C; last pushed 2026-10-19.
Why it matters: Relevant to APK and IPA analysis, Dynamic instrumentation.
Read the original source →BINNY: an open source agent harness for reverse engineering. Plug in any model, or a local one. GitHub discovery signal: 180 stars, 21 forks, 0 open issues; language Go; last pushed 2026-10-17. Topics: ghidra, llm-agent, malware-analysis, ollama, reverse-engineering, security-research.
Why it matters: Relevant to Binary reverse engineering.
Read the original source →See https://frida.re/news/ for details.
Why it matters: Relevant to APK and IPA analysis, Dynamic instrumentation.
Read the original source →Unpacker by Fahad - DPT-format Android packer analysis: RC4 code-store key recovery, dex restore/rebuild, APK signing and validation pipeline. GitHub discovery signal: 3 stars, 4 forks, 0 open issues; language Kotlin; last pushed 2026-09-27. Topics: android, android-reverse-engineering, apk, cpp, crypto, dotnet, frida, malware-analysis, python, reverse-engi…
Why it matters: Relevant to APK and IPA analysis, Android reverse engineering, Dynamic instrumentation.
Read the original source →49.0.4 Released 2026-10-19. Fixed wasi-http: Guests can add conflicting content lengths to messages GHSA-r8xh-cgf7-392j wasi-http p3: forwarded trailers aren't checked against is_forbidden_header hook GHSA-jxcf-8qw5-5c33 wasi-http p3: Guests can set incorrect content-length for spliced response bodies GHSA-9prg-84vf-g5fc Cranelift backend on aarch64 can jum…
Why it matters: Relevant to WebAssembly runtime.
Read the original source →48.0.7 Released 2026-10-19. Fixed wasi-http: Guests can add conflicting content lengths to messages GHSA-r8xh-cgf7-392j wasi-http p3: forwarded trailers aren't checked against is_forbidden_header hook GHSA-jxcf-8qw5-5c33 wasi-http p3: Guests can set incorrect content-length for spliced response bodies GHSA-9prg-84vf-g5fc Cranelift backend on aarch64 can jum…
Why it matters: Relevant to WebAssembly runtime.
Read the original source →FLOSS v4.0.0-alpha.1 This is the first alpha pre-release of FLOSS 4.0, merging the QUANTUMSTRAND architecture into floss and unifying layout-aware static string analysis, semantic tagging, and deobfuscation into a single pipeline. Install from PyPI with pip install --pre flare-floss (or pip install flare-floss==4.0.0a1 ), or download the standalone binaries…
Why it matters: Relevant to Binary reverse engineering, Malware analysis tooling.
Read the original source →Mask a register bit offset when lifting the bt instruction family.
Why it matters: Relevant to Binary reverse engineering, Decompiler research.
Read the original source →[aarch64] Lift the unprivileged, LOR, acquire exclusive pair and LSE …
Why it matters: Relevant to Binary reverse engineering, Decompiler research.
Read the original source →When we see a null pointer check, we know that the developer believes that the pointer may not be initialized. If the same pointer is later used without a null pointer check, we may consider this a violation of the developer's belief and ultimately a bug. We develop such a belief-guided program analysis for vulnerability detection (VD). For example, when an…
Why it matters: Relevant to Native binary tooling, Decompiler research.
Read the original source →