Current GitHub repositories and community stories discovered from focused IL2CPP, Unity, reverse engineering, decompiler, mobile analysis and WebAssembly searches. Updated 2026-08-27 11:13 UTC.
Android reverse engineering entirely on-device. Radare2 binary analysis, 8 Java decompilers, Flutter & Unity il2cpp support. GitHub discovery signal: 108 stars, 9 forks, 0 open issues; language Unknown; last pushed 2026-08-24. Topics: android-reverse, androidide, apk-analyzer, bytecode, decompiler, kotlin-android, radare2, reverse-engineering, smali, static-analysis.
Be Owner Dont Be Slave GitHub discovery signal: 48 stars, 11 forks, 0 open issues; language Rust; last pushed 2026-08-23. Topics: assetstudio, dumper, editor, enka-network, gacha, global-metadata, honkai-star-rail, il2cpp-dumper, mihoyo, mihoyo-hack.
A reverse engineering toolkit for Il2Cpp based on a Zygisk module, modified from the "Zygisk-Il2CppDumper" project. GitHub discovery signal: 50 stars, 15 forks, 0 open issues; language C; last pushed 2026-06-20.
x64dbg-MCP Server is a native MCP (Model Context Protocol) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Connect any MCP-compatible AI assistant and control x64dbg programmatically: set breakpoints, step through code, read memory, dump registers, and more. Built with Zig — zero dependencies, single-binary output, cros GitHub discovery signal: 1,488 stars, 146 forks, 0 open issues; langu…
Android Reverse Engineering Command-Line Automation Workspace. AI-driven security analysis with Claude Code. GitHub discovery signal: 66 stars, 10 forks, 0 open issues; language JavaScript; last pushed 2026-07-31. Topics: android, android-security, apk, claude-code, decompiler, frida, mobile-security, penetration-testing, reverse-engineering, security.
SOMCP 是一个运行在 Android 手机上的本地 SO 逆向 MCP 服务器。它通过 Streamable HTTP 暴露 MCP 工具，让客户端可以在手机上完成 ELF 结构分析、Rizin 反汇编/分析、LIEF ELF 修复/重写、补丁会话、构建导出、Cloudflare Tunnel 暴露和可选 APK MCP 桥接 GitHub discovery signal: 155 stars, 47 forks, 0 open issues; language Kotlin; last pushed 2026-08-26.
A verified map of reverse engineering and malware analysis. Disassemblers, unpacking, exploit dev, fuzzing, DFIR, and the deep-cut writeups other lists miss. GitHub discovery signal: 90 stars, 14 forks, 1 open issues; language Shell; last pushed 2026-08-04. Topics: awesome-list, binary-analysis, binary-exploitation, ctf, cybersecurity, dfir, exploit-development, firmware, fuzzing, ghidra.
One browser tab. Two legal DAT files. One endless night. Source-built C++ → WebAssembly port of Touhou 8. GitHub discovery signal: 57 stars, 0 forks, 0 open issues; language C++; last pushed 2026-08-26. Topics: browser-game, bullet-hell, cpp, danmaku, emscripten, game-port, imperishable-night, th08, touhou, touhou-games.
r0crawl_skills is a massive reverse-engineering skill arsenal for web, Android, iOS, Frida, native binaries, protocols, malware, firmware, and anti-analysis—built for beginners, tuned for pros, and engineered for reproducible results. GitHub discovery signal: 198 stars, 69 forks, 0 open issues; language Python; last pushed 2026-08-06.
玄镜 Android 逆向 Skill｜覆盖 APK、JADX、Frida、JNI、Native/SO、WebView、接口签名与离线复现。Evidence-driven Android reverse engineering for authorized targets. GitHub discovery signal: 3 stars, 1 forks, 0 open issues; language Python; last pushed 2026-07-30. Topics: android, android-reverse-engineering, apk-analysis, codex-skill, frida, jni, native-analysis, reverse-engineering, xuanjing.
Cursor for Reverse Engineering GitHub discovery signal: 26 stars, 3 forks, 0 open issues; language Rust; last pushed 2026-08-24. Topics: agentic-ai, decompiler, ide, radare2, reverse-engineering, rust, tauri.
A reverse engineer's binary Swiss-army knife in Rust: triage, disassembly, function/CFG recovery, crypto-constant + YARA scanning for PE/ELF/Mach-O. Installs as 'knife'. GitHub discovery signal: 35 stars, 1 forks, 0 open issues; language Rust; last pushed 2026-08-27. Topics: binary-analysis, cli, disassembler, elf, macho, malware-analysis, pe, reverse-engineering, rust, security-tools.
Flutter SSL Pinning Bypass Tool for Android & iOS — works on any Flutter version without pattern databases GitHub discovery signal: 293 stars, 52 forks, 0 open issues; language Python; last pushed 2026-08-05. Topics: android, apk, boringssl, bypass, flutter, flutter-ssl-pinning-bypass, frida, ios, ipa, latest-reflutter.
Maybe the headless Ghidra MCP you are looking for. GitHub discovery signal: 11 stars, 0 forks, 0 open issues; language Python; last pushed 2026-08-27. Topics: binary-analysis, decompiler, ghidra, ghidra-mcp, mcp, model-context-protocol, reverse-engineering.
Apkx-Hunter is an Android Static Analysis Framework in Debian Package written entirely in C with OWASP MASVS scanning with 15 categories and 166 detection patterns for Android security assessments, reverse engineering, malware analysis, and penetration testing. It features ML-based secret scoring, and advanced static security analysis. GitHub discovery signal: 86 stars, 12 forks, 0 open issues; language C; last push…
MCP server for iOS reverse engineering: static analysis, Frida dynamic hooks, FairPlay decryption, IPA resigning. 31 tools. GitHub discovery signal: 2 stars, 1 forks, 0 open issues; language Python; last pushed 2026-07-09.
Play Morrowind in your browser — the OpenMW engine compiled to WebAssembly, now with multiplayer and a cloud locker for your own game data. GitHub discovery signal: 91 stars, 9 forks, 3 open issues; language C++; last pushed 2026-08-27. Topics: browser-game, cpp, elder-scrolls, emscripten, game-engine, morrowind, multiplayer, openmw, self-hosted, wasm.
Fastest WebAssembly runtime for Go. Supports Component Model & Async. Zero dependencies, no CGO, pure Go. GitHub discovery signal: 42 stars, 4 forks, 2 open issues; language Go; last pushed 2026-08-25. Topics: ahead-of-time, compiler, go, golang, just-in-time, runtime, vm, wasi, wasm, webassembly.
Fast iOS decompiler & Mach-O disassembler in Rust — arm64, Objective-C class-dump, Swift metadata, and a native desktop GUI. Reads .ipa/App Store binaries directly, no Ghidra, IDA, radare2, or LLVM. GitHub discovery signal: 7 stars, 0 forks, 0 open issues; language Rust; last pushed 2026-07-04. Topics: aarch64, apple, arm64, binary-analysis, class-dump, decompiler, disassembler, ghidra-alternative, ida-pro, ios.
Next-gen Android APK signature verification bypass. Defeats direct-syscall checks, VMP packers (Ijiami 4th-gen), and preserves Play Integrity via bind mount. GitHub discovery signal: 6 stars, 3 forks, 0 open issues; language C; last pushed 2026-08-19. Topics: android, android-reverse-engineering, android-security, anti-tamper, apk-modding, apk-signature, arm64, bytehook, hooking, magisk.
GitHub discovery signal: 6 stars, 1 forks, 0 open issues; language Shell; last pushed 2026-08-14.
A static recompilation of Condemned 2: Bloodshot done with RexGlue. GitHub discovery signal: 131 stars, 3 forks, 12 open issues; language CMake; last pushed 2026-08-18. Topics: pc-port, recompilation, rexglue, static-recompilation, windows, xbox360.
GitHub discovery signal: 210 stars, 57 forks, 20 open issues; language Batchfile; last pushed 2026-08-14.
Succinct Compositional Program Graph (SCPG) static analysis engine & 14-diagram UML generator in Rust. GitHub discovery signal: 51 stars, 0 forks, 8 open issues; language Rust; last pushed 2026-08-24. Topics: code-property-graph, compiler-theory, program-analysis, robdd, rust, static-analysis, succinct-data-structures, tree-sitter, uml-generator.
Auditing AI agents: a curated list of papers, tools, datasets, benchmarks, and standards covering reliability, monitoring, failure attribution, and decision records. GitHub discovery signal: 114 stars, 19 forks, 2 open issues; language Python; last pushed 2026-08-24. Topics: agent-evaluation, agent-reliability, agentic-ai, ai-agents, ai-safety, auditable, auditing, awesome, awesome-list, failure-attribution.
A Rust-based x86-64 PE protection framework with RISC program virtualization, polymorphic VM bytecode, CFG transformation, runtime hardening, integrity checks, and execution verification. GitHub discovery signal: 26 stars, 4 forks, 0 open issues; language Rust; last pushed 2026-08-27. Topics: anti-debug, anti-dump, binary-protection, malware, obfuscation, obfuscator, obfuscator-llvm, obfuscators, packer, pe-packer.