15.1.1. 逆向工具

15.1.1.1. 二进制

• capstone

• dnspy .NET debugger and assembly editor

• binary ninja

• HAL The Hardware Analyzer

• LIEF Library to Instrument Executable Formats

15.1.1.2. PE工具

• EXEInfoPE

• DetectIt Easy

• StudyPE

15.1.1.3. API

• binaryninja api Public API, examples, documentation and issues for Binary Ninja

15.1.1.4. Bytecode

• bytecode viewer A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

• pycdc C++ python bytecode disassembler and decompiler

15.1.1.5. IDA

15.1.1.5.1. 文档与资料

• IDA Tutorials

• IDA SDK

• idapython cheatsheet

• awesome ida

15.1.1.5.2. 辅助工具

• HexRaysPyTools Find code patterns within the Hexrays AST

15.1.1.5.3. 插件

• IDArling

• abyss IDAPython Plugin for Postprocessing of Hexrays Decompiler Output

• Sark IDA Plugins & IDAPython Scripting Library

• IDA minsc is a plugin for IDA Pro that assists a user with scripting the IDAPython plugin that is bundled with the disassembler

• lucid An Interactive Hex-Rays Microcode Explorer

• grap grap: define and match graph patterns within binaries

15.1.1.5.4. Golang插件

• golang loader assist

• IDAGolangHelper Set of IDA Pro scripts for parsing GoLang types information stored in compiled binary

• go parser Yet Another Golang binary parser for IDAPro

15.1.1.6. Ghidra

15.1.1.6.1. 文档与资料

• Ghidra

• Ghidra API Overview

• Ghidra Online Courses

• Awesome Ghidra A curated list of awesome Ghidra materials

15.1.1.6.2. 插件

• Ghidra Cpp Class Analyzer

• GhidraSnippets Python snippets for Ghidra's Program and Decompiler APIs

15.1.1.7. Radare2

• radare2

• Radare2 Book

15.1.1.8. Diff

• diaphora

• polypyus

15.1.1.9. Patch

• e9patch A powerful static binary rewriting tool

15.1.1.10. 文件分析

• oletools python tools to analyze MS OLE2 files and MS Office documents

15.1.1.11. 加壳

• UPX the Ultimate Packer for eXecutables