App · Tool:
ODIS file unpackerC2
ODIS file unpacker extracts protected Java classes from ODIS plugin JARs and files from its DIDB data archives.
- App
Curated reverse engineering resources
5,191Evidence class
- C0full software reconstruction
- C1partial scope or analysis entry
- C2code & docs, no demo or download
- C3notes only
- ?Source unavailable or unreadable at review time
Apps
370Binary · Tool:
netdumperC2
netdumper extracts loaded .NET assemblies from Windows processes through the CLR Data Access Component.
- Binary
Reviewed coconutbird/netdumper@c7ffe79
App · Tool:
SandwitcherC2
Sandwitcher instruments Java and Kotlin method calls in Android apps by replacing ART method entry points with a trampoline through Pine and LSPlant.
- App
Reviewed IR0NBYTE/Sandwitcher@48f73f2
App · Tool:
Zygisk - Frida GadgetC2
Zygisk - Frida Gadget loads Frida Gadget into selected Android app processes for runtime instrumentation.
- App
Binary · Tool:
dnlibC2
dnlib is a .NET library for reading and writing modules and assemblies.
- Binary
Reviewed 0xd4d/dnlib@9871d3b
Binary · Tool:
View8C2
View8 is a static analysis tool that decompiles serialized V8 bytecode (JSC) files into readable JavaScript-like text.
- Binary
Reviewed suleram/View8@531ec8e
App · Tool:
SootC2
Soot is a Java optimization framework for analyzing and transforming Java bytecode.
- App
- Binary
Reviewed soot-oss/soot@0199d84
App · Tool:
DroidLysisC2
DroidLysis is a pre-analysis tool for Android apps that disassembles samples, organizes their contents, and flags code patterns for further inspection.
- App
- Binary
Reviewed cryptax/droidlysis@346c2b6
App · Tool:
VirtualXposedC1
VirtualXposed is an Android app that runs Xposed modules alongside apps in a virtual environment without root access, an unlocked bootloader, or a custom system image.
- App
Reviewed android-hacker/VirtualXposed@122beb3
App · Tool:
EdXposed FrameworkC1
EdXposed is a Riru module that provides an Xposed-compatible ART hooking framework for Android 8.0 through 11.
- App
Reviewed ElderDrivers/EdXposed@8f2308c
App · Tool:
Vector FrameworkC2
Vector Framework is a Zygisk module that provides ART hooking for Android apps.
- App
Reviewed JingMatrix/Vector@093ea59
App · Tool:
JustTrustMeC2
JustTrustMe is an Xposed module that disables SSL certificate checks in Android apps.
- App
Reviewed Fuzion24/JustTrustMe@35efd07
App · Tool:
DexSQLC2
Queries classes, methods, fields, strings, call edges and Smali disassembly across Android APK and DEX files with SQL.
- App
Reviewed LSPosed/dexsql-release@77ee5cc
App · Tool:
smali/baksmali (Google fork)C2
Assemble and disassemble Android DEX bytecode using Google’s continuation of smali/baksmali.
- App
Reviewed google/smali@1a36aa3
App · Tool:
JD-CoreC2
Embed the Java decompiler engine used by JD-GUI through loader and printer interfaces.
- App
Reviewed java-decompiler/jd-core@fafc656
App · Tool:
Mono.CecilC2
Inspect and modify .NET metadata and CIL code without loading target assemblies through Reflection.
- App
- Binary
Reviewed jbevain/cecil@882ca5e
App · Tool:
Apk Dependency GraphC1
Apk Dependency Graph reads an APK and writes an HTML view of class coupling.
- App
App · Tool:
apk2goldC2
apk2gold is a command-line wrapper that decompiles an Android APK toward a single source tree.
- App
Reviewed lxdvs/apk2gold@b4695e1
App · Tool:
AndroidProjectCreatorC2
AndroidProjectCreator converts an APK into an Android Studio project using multiple open-source decompilers.
- App
App · Tool:
apkxC2
apkx is a Python wrapper around free dex converters and Java decompilers that extracts Java source from an APK.
- App
Reviewed muellerberndt/apkx@fcb74ff
Binary · Tool:
HeliosC2
Helios is a Java reverse engineering application with a file browser and editor.
- Binary
Binary · Tool:
JavaDecompileTool-GUIC1
JavaDecompileTool-GUI is a desktop front end for the fernflower Java decompiler.
- Binary
Binary · Tool:
dncilC1
dncil is a Python library that disassembles .NET Common Intermediate Language.
- Binary
Reviewed mandiant/dncil@d174a36
App · Tool:
droidsawC1
droidsaw is a Rust decompiler for Android DEX files and Hermes bundles.
- App
Reviewed droidsaw/droidsaw@50eb045
Binary · Tool:
dotscopeC2
dotscope is a Rust framework that parses, disassembles, and modifies .NET PE assemblies and CIL without Windows or the .NET runtime.
- Binary
Reviewed ATRAPSLLC/dotscope@3028b1a
Binary · Tool:
JD-GUIC1
JD-GUI is a standalone graphical utility that displays Java source reconstructed from .class files and browses methods and fields.
- Binary
Reviewed java-decompiler/jd-gui@b3c1ced
Binary · Tool:
CFRC2
CFR decompiles Java class files and jars, including Java 9, 12, and 14 features, and is written in Java 6.
- Binary
Reviewed leibnitz27/cfr@c414525
Binary · Tool:
KrakatauC2
Krakatau assembles and disassembles Java bytecode, including obfuscated class files, and can reassemble the text back into a class file.
- Binary
Reviewed Storyyeller/Krakatau@6929fd6
Binary · Tool:
ApkToolPlusC2
ApkToolPlus is a graphical APK analysis tool.
- Binary
Reviewed CYRUS-STUDIO/ApkToolPlus@4c1c9a1
Binary · Tool:
ProcyonC1
Procyon is a Java metaprogramming suite.
- Binary
Reviewed mstrobel/procyon@88a95fa
Binary · Tool:
onekey-decompile-apkC2
onekey-decompile-apk runs apktool, dex2jar, and JD-GUI in one step.
- Binary
Binary · Tool:
Show JavaC2
Show Java decompiles APK, JAR, and dex files on an Android device, including layouts, drawables, menus, AndroidManifest, and image assets.
- Binary
Reviewed niranjan94/show-java@f2f71dc
Binary · Tool:
JADXecuteC1
JADXecute is a JADX plugin that runs Java against the open jadx-gui session, so a script can print or change parts of the decompiler output.
- Binary
Reviewed LaurieWired/JADXecute@35b6df7
Binary · Tool:
JD-EclipseC1
JD-Eclipse is an Eclipse plug-in that shows Java source for class files during debugging.
- Binary
Reviewed java-decompiler/jd-eclipse@9f28f36
Binary · Tool:
Old RodC2
Old Rod disassembles a .NET executable protected by the KoiVM virtualizer in ConfuserEx and recompiles that VM code to CIL.
- Binary
Reviewed Washi1337/OldRod@56fc436
App · Tool:
Tika JTD+C1
Tika JTD+ parses Ichitaro .jtd, .jtt and .jttc documents for Apache Tika, extracting text, metadata and approximate table structure.
- App
Reviewed KHiyowa/Tika-JTD@045ef00
App · Tool:
NPatchC2
NPatch adds an Xposed loader and Vector hooking core to Android APKs so Xposed modules can run without root access.
- App
Reviewed 7723mod/NPatch@efecf30
App · Case study:
Aegis: trace a login-code calculationC2
An official APK investigation follows TOTP methods in Aegis and publishes artifact identities and selected Evidence.
- App
Reviewed morluto/rea@808339f
App · Case study:
Notion: trace the clipboard bridgeC3
Trace a packaged Electron clipboard path using REA findings and separate source inspection; the dynamic wrapper remains a stated limit.
- App
Reviewed morluto/rea@808339f
App · Case study:
PicoPrint: LX-D02 printer investigationC2
The author describes REA-assisted Android investigation followed by separate Hermes decompilation to support a Windows BLE printer.
- App
- Protocol
Reviewed morluto/rea
App · Case study:
ReaCut: video-editor reconstructionC1
An independent video editor whose authors document REA-assisted investigation of Jianying/CapCut behavior and project formats.
- App
Reviewed Xiangyu-CAS/rea-capcut@da6f2f8
Protocol · Case study:
CF632BLE: a local client from scale-protocol researchC2
Reimplements the CF632BLE scale’s BLE protocol and body-composition calculations from research on the vendor’s Unique Health Android app.
- Protocol
- App
Reviewed guyru/cf632ble@c029ef5
App · Case study:
zee-rp: reconstructing supported Axure RP 11 document operationsC1
Reads and rewrites supported native Axure RP 11 documents through a binary-record codec, reference-aware cloning and constrained interaction writers.
- App
Reviewed LilZeeCN/zee-rp@473761e
App · Case study:
Virtual Desktop Streamer: rehosting the platform layer on LinuxC2
An author-reported Claude Code and REA workflow replaces the macOS streamer’s capture, encoding, audio and input layer with Linux implementations while reusing vendor protocol libraries.
- App
Reviewed cudanexus/vd-streamer-linux@e65c302
App · Case study:
Open Claude UI: REA-informed interface reference componentsC2
Publishes React components, motion helpers and design-system notes derived from the author’s reported REA investigation of Claude Desktop.
- App
Reviewed Caho1/open-claude-ui@ddf3aea
App · Case study:
PlxNative: reconstructing a native webOS media-client interfaceC1
An unofficial Plex client built after the author investigated LG webOS native media interfaces with Ghidra and coding agents.
- App
Reviewed GLinnik21/plx-native@0b0b220
App · Case study:
Windows Calculator: reconstructing percentage rulesC1
REA’s case traces the installed Windows Calculator model DLL to explain different percentage behavior for multiplication/division and other operations.
- App
- Binary
Reviewed morluto/rea@c360cfc
App · Case study:
Feishu: an author-reported isolated second app instanceC2
The author reports using Codex and REA analysis to adapt a separate macOS Feishu copy with its own application identity, data directory and single-instance lock.
- App
App · Case study:
PhotoCraft: editor workflow reconstruction and PSD round-trip boundariesC0
The authors describe this Rust image editor as a clean-room reimplementation of Photoshop-style workflows.
- App
Reviewed storytold/photocraft@5f65579
App · Case study:
WordCraft: document workflow reconstruction and bounded DOCX compatibilityC0
The authors describe WordCraft as a clean-room Rust implementation of familiar Microsoft Word workflows.
- App
Reviewed storytold/wordcraft@eae2421
App · Case study:
GridCraft: spreadsheet workflow reconstruction and XLSX round-trip limitsC0
The authors describe GridCraft as a clean-room Rust implementation of Excel-style spreadsheet workflows.
- App
Reviewed storytold/gridcraft@f1894c6
App · Case study:
DeckCraft: presentation workflow reconstruction and bounded PPTX interchangeC0
The authors describe DeckCraft as a clean-room Rust implementation of PowerPoint-style presentation workflows.
- App
Reviewed storytold/deckcraft@1dc6972
App · Case study:
Ledger Reborn: an independent accounting app informed by QuickBooks studyC1
The maintainer reports using REA and Ghidra to study selected QuickBooks Desktop for Mac behavior, then independently implements a local accounting application.
- App
Reviewed lxistired/ledger-reborn@d7f6b8a
App · Case study:
Pocket Tasks: reconstructing task state and persistenceC2
A teaching case with disclosed prior source access carries a REA-assisted investigation of a small command-line app into a separate Node implementation.
- App
App · Case study:
Open Scrantic: reconstructing the Johnny Castaway screensaver engineC1
Reconstructs the Johnny Castaway screensaver engine in Rust, with author-disclosed REA and Claude Code use.
- App
Reviewed glauberlima/open-scrantic@2db7500
App · Case study:
Screen Studio: an author-reported REA study of auto-zoom rulesC3
The author reports using REA to map Screen Studio’s Electron package, reading six auto-zoom and cursor rules from its obfuscated code with Claude Code’s help, and having Claude Code write an independent recorder and renderer from those rules.
- App
Reviewed x.com/i/article/2109834677343432704
App · Case study:
Claude Code background lab: an REA-informed reimplementation of a desktop animationC2
Reimplements the glyph-wind background of the Claude desktop app’s Claude Code New session view as an offline WebGL2 page with a 38-slider control panel.
- App
App · Case study:
Notes CSV export: an author-reported REA check of reconstruction oraclesC3
A Chinese article breaks three versions of a Python CSV exporter that reproduces the Notes teaching app shipped with REA.
- App
Reviewed x.com/i/article/2110962506604929025
App · Case study:
Sofa TV Browser: a remote-friendly BrowseHere alternativeC1
An Android TV browser follows BrowseHere's remote-control interaction design with its own implementation.
- App
App · Case study:
FastView-REA: a Rust reconstruction of Fast View 5C1
A Rust desktop reconstruction of Mekhanotronika Fast View 5 uses REA and Ghidra research to reproduce oscillogram analysis and relay-characteristic views.
- App
Reviewed dmytrobsp/fastview-rea@deb89ea
App · Case study:
DiskLens: a WinDirStat-derived disk usage analyzerC2
A Rust/Tauri disk analyzer combines REA/Ghidra investigation of WinDirStat 2.5.0 with source-code ports of its treemap and color handling.
- App
- Binary
Reviewed KarlssonChristoffer/DiskLens@c7d67f4
App · Case study:
SoundConnect Desktop: a Windows client reusing a reviewed headset engineC1
A Windows Sony-headphone client adopts existing libmdr/libmdr-bt engine DLLs after a documented REA-assisted binary inventory and source review.
- App
- Binary
App · Case study:
rec-rs: an OBS-informed Rust recorder for macOSC1
A macOS recorder is informed by OBS architecture research using REA package inspection, platform tools and public source references.
- App
Reviewed michaelshimeles/rec-rs@93dd494
App · Case study:
Sketch: a Paper-shell-informed native Rust canvasC1
A Rust canvas models Paper-like editing behavior after REA investigation of the Paper Desktop shell.
- App
Reviewed michaelshimeles/sketch@af814b7
App · Case study:
CADCraft: a clean-room CAD and drafting application in RustC0
The authors describe CADCraft as an open-source, clean-room computer-aided design and drafting application built in pure Rust.
- App
Reviewed storytold/cadcraft@b639b18
App · Case study:
DesignCraft: a clean-room page layout and publishing studio in RustC0
The authors describe DesignCraft as an open-source, clean-room page layout and desktop publishing studio built in pure Rust.
- App
Reviewed storytold/designcraft@f1bdec7
App · Case study:
EffectCraft: a clean-room motion graphics and compositing studio in RustC0
The authors describe EffectCraft as an open-source, clean-room motion graphics and visual effects studio built in pure Rust.
- App
Reviewed storytold/effectcraft@b7dee07
App · Case study:
FigCraft: a clean-room interface design and prototyping tool in RustC0
The authors describe FigCraft as an open-source, clean-room interface design and prototyping tool built in pure Rust.
- App
Reviewed storytold/figcraft@35684ea
App · Case study:
FilmCraft: a clean-room nonlinear video editor in RustC0
The authors describe FilmCraft as an open-source, clean-room nonlinear video editor built in pure Rust.
- App
Reviewed storytold/filmcraft@57dc82e
App · Case study:
LightCraft: a clean-room photo library and raw developer in RustC0
The authors describe LightCraft as an open-source, clean-room non-destructive photo library and raw developer built in pure Rust.
- App
Reviewed storytold/lightcraft@389ab17
App · Case study:
PdfCraft: a clean-room PDF reader and editor in RustC0
The authors describe PdfCraft as an open-source, clean-room PDF reader and editor built in pure Rust.
- App
Reviewed storytold/pdfcraft@3709926
App · Case study:
SoundCraft: a clean-room digital audio workstation in RustC0
The authors describe SoundCraft as an open-source, clean-room digital audio workstation built in pure Rust.
- App
Reviewed storytold/soundcraft@b11ffe7
App · Case study:
VectorCraft: a clean-room vector illustration application in RustC0
The authors describe VectorCraft as an open-source, clean-room vector illustration application built in pure Rust.
- App
Reviewed storytold/vectorcraft@999f4e6
App · Case study:
Picture Man: a Rust rebuild of the Windows 3.x image editorC2
A cross-platform Rust rebuild of Picture Man 1.55 (1991-1993), the true-color image editor for Windows 3.x, per the project README.
- App
- Binary
Reviewed yovico-ai/pictureman@95c0ce0
App · Case study:
RE:Notepad: rebuilding Windows 10 Notepad behavior in RustC1
RE:Notepad reconstructs Windows 10 Notepad behavior in a Rust and Win32 editor with a Windows 11-style interface.
- App
- Binary
Reviewed nikkoxgonzales/RENotepad@bcd157e
App · Case study:
Audionic Trance Airbud 850: reconstructing BLE controls for LinuxC2
A Linux client reconstructs Audionic Trance Airbud 850 BLE controls from analysis of the Audionic Suite Android app and Jieli SDK references.
- App
- Protocol
Reviewed huzaifanur/audionic-ble@926731b
App · Case study:
JTrac 3: an issue tracker rebuilt after REA analysis of JTrac 2.3.3C2
JTrac 3 is an independent issue tracker informed by the author's REA MCP study of the JTrac 2.3.3 WAR.
- App
Reviewed Jerophin123/JTrac@6713c56
App · Case study:
Reversed engineering Icsee: a macOS camera viewer informed by REA researchC2
Reversed engineering Icsee is a Swift macOS viewer for local iCSee and Xiongmai cameras, informed by REA inspection of an Android app and native SDK and by authenticated RTSP tests.
- App
- Protocol
App · Case study:
qcywatch: a QCY Watch GT2 client built from its BLE protocol and face formatC2
qcywatch reconstructs QCY Watch GT2 control and watch-face upload from the QCY Android app, BLE captures and face files.
- App
- Protocol
Reviewed DhrubaDC1/qcywatch@a815407
App · Case study:
hexgrab: rebuilding a color picker from a REA study of PowerToysC2
hexgrab is a Windows WPF color picker built after a REA investigation of the shipped PowerToys Color Picker.
- App
- Binary
Reviewed iammukeshm/hexgrab@511c580
App · Case study:
Windows Live Mail 2012: UI and resource format reconstructionC2
Windows Live Mail 2012 research reconstructs the Japanese edition's UI layout, resource and message-store formats from an owned installation.
- App
- Binary
Reviewed hinatamaxxx/wlm2012-research@2b63049
App · Case study:
anova-power-cli: reconstructing G*Power one-way ANOVA calculationsC2
anova-power-cli reconstructs G*Power 3.1.9.7's one-way ANOVA power calculations in a Python CLI and MCP service.
- App
App · Case study:
Plaude Archiver: local Plaud Note Pro recording transferC2
Plaude Archiver reconstructs the Plaud Note Pro recording transfer protocol from analysis of the Android app, using REA and JADX in the documented workflow.
- App
- Protocol
Reviewed roopen219/plaude-archiver@e87f345
App · Case study:
OpenPDF Studio: rebuilding PDF editing interactions from WPS PDF researchC2
OpenPDF Studio builds a local macOS PDF editor informed by REA-assisted observation of WPS Office 12.1.28496's PDF interface.
- App
Reviewed aotefan/openpdf-studio@056d7d2
App · Case study:
Keymarks: reconstructing Powermarks 3.5 bookmarks and workflowsC1
Keymarks rebuilds Powermarks 3.5's keyword-based bookmark workflow as a Windows Tauri app with SQLite search and a browser extension.
- App
Reviewed novakda/keymarks@e6bfd91
App · Case study:
MiPods: reconstructing Xiaomi earbuds control on macOSC1
MiPods reconstructs Xiaomi earbuds control in a macOS menu-bar app using a recovered BLE GATT protocol.
- App
- Protocol
Reviewed JackWPP/MiPods@eb1376e
App · Case study:
Taskly: rebuilding Trello's Electron desktop shellC1
Taskly is an offline kanban app whose Electron desktop shell was reconstructed from Trello's app.asar using REA.
Demo available · no screenshot - App
Reviewed mateusrezendeps19/taskly@a8a6762
App · Case study:
mystery-sdl: porting the Mystery screen saver to SDL2C2
mystery-sdl ports the Microsoft Plus! Mystery screen saver to SDL2 on Linux.
- App
Reviewed viny182/mystery-sdl@fec0d3c
App · Case study:
LSX II Volume Fixer: reconstructing volume behaviorC2
Uses measured USB-volume behavior and a macOS audio proxy to map volume keys to a KEF LSX II’s LAN control.
- App
Reviewed roberdorfer/kef-lsx-volume@6fbd7f7
Protocol · Case study:
UU Remote on Linux: an unofficial protocol implementationC1
Implements an unofficial native Linux host for NetEase UU Remote, using protocol behavior the maintainer says was recovered from official-client traffic and shipped programs.
- Protocol
- App
Reviewed VallierDev/uu-remote-linux@696cf10
App · Case study:
TCLimate: reconstructing selected TCL Home cloud controlsC1
Implements selected TCL Home air-conditioner controls and electricity reporting in a native macOS menu-bar app.
- App
- Protocol
Reviewed umarz317/TCLimate@2a33c20
App · Case study:
Browserbase plugin: re-hosting Claude in Chrome’s browser bridgeC2
Stands in for the Claude in Chrome extension side of Claude Code’s local browser bridge and runs the requested actions in Browserbase cloud browsers.
- App
- Protocol
App · Case study:
Visor: an independent Ray-Ban Meta glasses clientC2
Implements an Android replacement for the Meta AI companion app that speaks the Ray-Ban Meta glasses’ own Bluetooth and Wi-Fi Direct protocol, imports media, exposes settings and answers “Hey Meta” with a model the user chooses.
- App
- Protocol
Reviewed macedonga/visor@8caaa12
App · Case study:
wine-uwp: running packaged Windows Store apps on a patched WineC2
Extends Wine 11.17 so that signed MSIX Store apps, with Shapr3D as the main target, install and run on Linux without their source or symbols.
- App
Reviewed designgears/wine-uwp@1cf79d0
App · Case study:
RKD Telemetry Extractor: decoding Race-Keeper track-day recordingsC1
Documents the proprietary .rkd telemetry format written by Race-Keeper “Instant Video” recorders, whose bundled player runs only on Windows, and implements matching Python and Go parsers that export GPS and IMU channels as Telemetry Overlay CSV and GPX.
- App
App · Case study:
Elgato HDR: a userspace capture path for the Elgato 4K X’s 10-bit modeC1
A native macOS app that reaches the Elgato 4K X capture card’s 10-bit P010 video mode, which the project says Apple’s built-in webcam driver does not expose to apps.
- App
- Protocol
Reviewed talkaboutdesign/elgato-hdr@7799d3c
Protocol · Case study:
Galaxy Buds Client: an unofficial manager built on Samsung’s earbud protocolC1
Reimplements control of Samsung Galaxy Buds over their proprietary RFCOMM serial protocol in a cross-platform desktop and Android manager.
- Protocol
- App
Reviewed timschneeb/GalaxyBudsClient@754b6fd
App · Case study:
Wino Mail: recreating Windows Mail and CalendarC2
Native Windows client that aims to preserve the familiar Windows Mail and Calendar experience while rebuilding its functionality.
- App
Reviewed bkaankose/Wino-Mail@72b8d56
App · Case study:
ScooterLink: reconstructing Honda RoadSync’s handlebar-button protocolC1
Replaces Honda RoadSync’s Apple Music-only media control with an iOS app that pairs with a Honda PCX 2025 TFT dash over Bluetooth Low Energy and turns handlebar presses into system-wide commands for any player.
- App
- Protocol
Reviewed gdorgian/ScooterLink@a089f62