Multi-architecture assembler for IDA Pro. Powered by Keystone Engine.

Collaborative malware analysis framework

abyss - augmentation of Hexrays decompiler output

A plugin based on IDAPython for a functional DWIM interface. Current development against most recent IDA is in the "persistence-refactor" branch, ancient (but stable) work is in "master", so... create an issue if you want/need something backported. Use "Wiki" or "Discussions" for examples, and smash that "Star" button if you like this.

DiffRays is a research-oriented tool for binary patch diffing, designed to aid in vulnerability research, exploit development, and reverse engineering.

PoC of modifying HexRays AST

Yara rule making tool (IDA Pro & Binary Ninja & Cutter & Ghidra Plugin)

Run IDA scripts headlessly.

A python library for reading IDA pro databases.

基于 Unicorn 引擎的轻量级 ARM64 动态追踪模拟工具。支持 IDA Pro、生成 Tenet 日志、本地代码模拟、内存转储、寄存器状态追踪和指令级日志记录。

sigmaker is a zero-dependency IDA Pro 9.0+ cross-platform signature maker plugin with optional SIMD (e.g. AVX2/NEON/SSE2) speedups that works on MacOS/Linux/Windows. It allows configurable wildcard operand patterns, nibbles, and signature generation just by right clicking.

DelphiHelper is a python IDA Pro plugin aiming to help the analysis of x86/x86_64 binaries written in Delphi programming language.

Tool that automates some useful structure routines in IDA PRO

Alternative API for IDA / Hex-Rays

Framework to automate working with AST in IDA Pro

D810-ng (Next Generation) is an updated, tested, refactored, and optimized IDA Pro plugin used to deobfuscate code at decompilation time by modifying IDA Pro microcode.

IDA Pro plugin that displays all comments in a database

a IDA 7.0 plugins that helps to attach process created by pwntools and debug pwn

IDA, Ghidra and Radare2 scripts. Also Android scripts to make your life easier.

Docker configuration (and only docker configuration) files for hosting self-hosted Hexvault, Lumina and Hexlicsrv.