ghidra-sre Web
https://ghidra-sre.org/
NSA's free reverse-engineering suite
How to use it
Download and install, create a project, import a binary, and let auto-analysis run — then read decompiled C-like output in the CodeBrowser.
Open resource →
ghidra GitHub
https://github.com/NationalSecurityAgency/ghidra/
Open-source code repository
How to use it
Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.
rada Web
https://rada.re/
Radare2 reverse-engineering framework
How to use it
Install, then open binaries with `r2 file`; use `aaa` to analyze and `pdf` to disassemble functions. Steep learning curve, extremely powerful.
radare2 GitHub
https://github.com/radareorg/radare2/
Open-source code repository
How to use it
Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.
rizin Web
https://rizin.re/
Rizin (radare2 fork)
How to use it
Friendlier fork of radare2; same workflow with cleaner commands.
cutter Web
https://cutter.re/
Cutter GUI for Rizin
How to use it
Point-and-click decompiler/disassembler GUI — open a binary, switch to the decompiler tab, and navigate functions visually.
cutter GitHub
https://github.com/rizinorg/cutter/
Open-source code repository
How to use it
Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.
hex-rays Web
https://hex-rays.com/ida-pro/
IDA Pro — industry-standard disassembler
How to use it
The professional decompiler; IDA Free is available for x86. Open a binary, let analysis finish, press F5 for pseudocode.
binary Web
https://binary.ninja/
Binary Ninja platform
How to use it
Modern RE platform with excellent intermediate-language views; free cloud version available.
x64dbg Web
https://x64dbg.com/
Windows debugger
How to use it
Open or attach to a Windows executable, set breakpoints, and step through code to watch it execute — the go-to for Windows malware unpacking.
x64dbg GitHub
https://github.com/x64dbg/x64dbg/
Open-source code repository
How to use it
Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.
dnSpy GitHub
https://github.com/dnSpyEx/dnSpy/
Open-source code repository
How to use it
Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.
werwolv Web
https://imhex.werwolv.net/
ImHex hex editor
How to use it
Open any file to inspect and pattern-match its bytes with a modern hex editor.
ImHex GitHub
https://github.com/WerWolv/ImHex/
Open-source code repository
How to use it
Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.
angr Web
https://angr.io/
angr binary-analysis framework
How to use it
Python library for symbolic execution — write scripts that automatically solve for inputs reaching a target code path.
angr GitHub
https://github.com/angr/angr/
Open-source code repository
How to use it
Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.
capstone-engine Web
https://www.capstone-engine.org/
Capstone disassembly engine
How to use it
The disassembly library behind most RE tools; embed it in your own scripts.
capstone GitHub
https://github.com/capstone-engine/capstone/
Open-source code repository
How to use it
Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.
keystone-engine Web
https://www.keystone-engine.org/
Keystone assembler engine
How to use it
Assemble instructions to machine code from Python/C — the counterpart to Capstone.
keystone GitHub
https://github.com/keystone-engine/keystone/
Open-source code repository
How to use it
Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.
unicorn-engine Web
https://www.unicorn-engine.org/
Unicorn CPU emulator
How to use it
Emulate CPU instructions in scripts to run code fragments safely without the full program.
unicorn GitHub
https://github.com/unicorn-engine/unicorn/
Open-source code repository
How to use it
Open the repo page, read the README for install instructions (usually a git clone or pip install command), then run it in a terminal. Check the 'Issues' and 'Releases' tabs for updates.