最新发现的仓库（未审核）.

BLE lab tools for the Google Fitbit Air: GATT dump, Heart Rate stream recorder, gap-aware quality report.

Hard Truck Mod SDK and modpack for 18 Wheels of Steel: reusable modding tools, truck physics and camera improvements, accessible menus, and sanitized crash reports.

REA（Reverse Engineer Anything）的 DeepSeek Harness 插件：一个 bundle 同时挂载 MCP 服务器、渐进式披露桥接和设置面板配置页，REA 配置只留一份文件

Emacs package: jump to jar sources and decompiled Java/Kotlin classes from Eglot and lsp-mode

Retro-terminal GUI + MCP server to decompile, inspect, patch, rebuild & sign Android APKs (jadx + apktool), with a built-in Claude assistant.

Local-first Android companion for the Prixton Life Fit smartwatch — BLE protocol research, health observations, and notification forwarding.

Paper.design Reverse Engineering Case Study: Electron ASAR Forensic Dissection, 10k-Node Canvas Benchmarks & Export Pipeline

Free open-source Fusion add-in: scan/STL to editable CAD (sketches, surfaces, generative truss). By @igor3dprint

Host-authoritative multiplayer co-op mod for Slime Rancher 2: reliable netcode, full-range vac, synced progression. By Rylaix (dev) & Kum1te (QA).

Windows 桌面端安卓设备管理工具（ADB + root）：文件 / 模块 / 应用 / 插件一体化，手机端不装任何 App。.NET 8 + Avalonia，单文件约 27MB，启动 0.6s。内置 .dfp 插件系统与 AVB 工作台（与 avbtool 逐字节一致）。部分代码与文档在 DeepSeek 模型辅助下完成，均已人工审阅与验证。

Faithfull decompilation of Destruction Derby 2 on the PSX.

Reverse engineering of RedCat's Razende Rekenrace (1996, DOS) and a from-scratch C port for Linux and the browser (WebAssembly). Needs your own copy of the game data.

Non-root fix for the Google Play Store blocked on Chinese-firmware Onyx Boox e-ink readers (confirmed on a Boox Leaf 5C).

TOSHIBA e-STUDIO2323AM/2823AM 原生 CUPS 驱动（PJL + JBIG，逆向自 Windows GDI 驱动）

Siemens MS42 (0110C6) / MS43 (430069) DME, BMW M52TU / M54: reverse engineering, C166 disassembler and assembler, image checker, docs EN/RU. Paused.

Reverse engineered & reconstructed architecture, MCP servers, and deployment blueprints for ReUI, Google Lighthouse, Context7, and Infimium using REA (morluto/rea).

把我做过的四个 MCP 项目压缩成一套工程 SOP：选靶、侦察、工具设计、幂等、验证、发布，外加 20 条真实死路

An open-source player for Diabolik Lovers Grand Edition: Haunted Dark Bridal and MORE,BLOOD on Windows, macOS, Linux, Android, and iOS. Rust and Godot 4. It reads the game from your own Switch copy. Not playable yet.

Reverse engineering the Broadlink RM mini 3 (Marvell 88MC200 + 88W8801): SWD/UART access, flash dump, firmware analysis, pin map, own bare-metal IR code and a modified firmware image

Magnet Wire v2 加载器防御性静态分析：stage-2 九层自解密、DMV2 配置、握手协议、IOC 与 YARA（样本不随仓库分发）

Python implementation of the packing detection heuristic from the paper "BinStat Tool for Recognition of Packed Executables" of Jin et al.

MCP server exposing game memory as 10 AI-callable tools (read/write player attributes, locate objects by value, scan memory)

Complete, reverse-engineered reconstruction of the 106 Skipper UI motion components + 1 local primitive. Built with Next.js 15, React 19, Tailwind CSS, Framer Motion, GSAP, and Three.js. Self-contained, fully typed, locally hosted assets, and CLI extractable.

Clone any app, step by step: 12 skills (recon, architect, design, build, backend, test, diff, entrepreneur, brand, launch, deploy) for Cursor and Grok Bot.

In response to BLA. Bounded artifact analysis, evidence and REA handoff.

DeepSeek Harness plugin that ships the Reverse Engineer Anything self-learning loop as a loadable skill: examine a product you are authorised to rebuild, build your own equivalent, review it against evidence, close the gaps, and repeat until a written 100% checklist passes.

Full-system ESP32-S3/C3 E-Ink reader emulator in QEMU: boots the YBX factory image and stock CrossPoint, with SSD1677 + GT911 forensics. MIT tooling, GPL-2.0 QEMU patches.

An LD_PRELOAD'd ImGui overlay for X3: Albion Prelude — live sector table, 3D holographic map rendered from the engine's own geometry, and a bridge that drives the game back. Built by reverse-engineering the 32-bit engine.

Agent skill (Claude Code, Codex, Gemini CLI, Cursor) for building themes, plugins and tools for the Ola S1 Gen 1 dash. Auto-updates from Ola Dash SDK + CAN reference. Unofficial.

Research archive of Diablo II: Lord of Destruction 1.14d — system specs, function/struct maps, call indexes and Ghidra decompiler reference for modders. Requires your own copy of the game.

Open-source save editor for Dungeon Within (Android): edit gold/resources, monsters, abilities, facilities, Dark Lord forms and variants, then re-encrypt the save with the game itself. Works on emulators and rooted phones.

Broadcom FaceTime HD 摄像头 (PCI 14e4:1570) 的 Linux 驱动 — 驱动 + 可验证固件供应链 + 以 Apple 官方 kext 为 ground truth 的逆向交叉审计

Linux fixes for the HP ZBook 17 G3: mute/mic-mute and airplane mode LEDs, fan sensors, hp-wmi fan warning; rebuilt for every Ubuntu kernel. Findings from HP's Windows drivers.

A native Windows port of Road Trip (PS2)

Make the Blackmagic DaVinci Resolve Speed Editor work over Bluetooth on Linux — fixes the dead panel and the UI lag (udev rule, BlueZ GET_REPORT backport, and a 3-byte patch for Resolve 21.1.1/21.1.2 Bluetooth checks).

Python local WhatsApp protocol server demo with encrypted message routing, group/call signaling, media relay, bundled TLS, and adaptive Android USB hooks.

A bridge that puts Wallpaper Engine wallpapers behind the NetEase CloudMusic desktop client. 把 Wallpaper Engine 动态壁纸铺到网易云音乐 PC 端背景，不透明度/明暗/染色/模糊 直接在 WE 属性面板里调。

iPhone Duo (iPhone19,4, A20 Pro t8160) hardware-to-software map from the iOS 27.2 restore image

Open-source smart PPI bridge for Siemens S7-200 PLCs (CPU 214) over generic USB-RS485 adapters

Rooted Samsung S95F display research: kernel/display interfaces, controller-RAM blackout mitigation, TV graphics/MGA and Kodi SDR/HDR line correction, calibration and panel research.

Reverse-Engineered IO Scheduler based on Xiaomi's CPQ IO Sched shipped on HyperOS

My personal roadmap to learn Android app hacking from arabic and english resources and document everything I study step-by-step.

A lightweight C# obfuscation tool for .NET applications.

FIIL 耳机的 HyperOS 系统级控制模块（Xposed/LSPosed）· UI 与设置项对齐 OppoPods 2.2.0

Recover SMS and contacts from Nokia Series 30+ .ib backup files

A production-ready system prompt that turns LLMs into professional reverse-engineering / binary-analysis assistants | PE/ELF | Ghidra | IDA | x64dbg | Frida | angr | CTF | 逆向工程提示词

WinRAR-inspired file archiver built with C#/.NET 7/WPF — reverse engineered from WinRAR 7.13 binary using REA (Ghidra)

Patch scripts for Ricoh GXR firmware 1.51: Sepia, KODACHROME and PORTRA 400 Image Settings, Traditional Chinese menu

Fan preservation project: makes Smosh: Food Battle The Game (2014, Android) fully playable offline. Docs, install guides and patch tooling — no game files included.

Open-source firmware research and experimental operating system for Smartlink SL6801-based MP3 players. ARM reverse engineering, LVGL, firmware patching and hardware diagnostics.

Hearts of Iron IV: hand parts of your country (land, air, navy, economy, politics...) to the game's own AI

Unofficial Migros API client, MCP server, and local dashboard for your own Cumulus account.

Restored, playable build of The Hook-Up (THUP Games, 2007): save slots, autosave, freeze fixes, web player and a standalone Windows / Steam Deck edition

Agent skill + CLI that turn a HAR capture into a private API's inventory, schemas and a typed Python client — offline, stdlib only

No-root Android mod loader for GTA: San Andreas – Definitive Edition 1.87.0 (arm64): AML injection plus Android ports of GTA_Prop_Fix, ProjectPropsDE, CLEO, Pak Loader and Loading Music

Unofficial open dash platform for the Ola S1 Pro Gen 1: Slint host app, runtime themes, plugins. Not affiliated with Ola Electric.

G.AI v2.6.8 (com.aichatmaster.chat) APK 逆向 → 匿名 2API：Flutter/blutter 全量还原 AES-128-CBC 信封 + SHA1 排序签名，零鉴权凭 x-device-id 流式出字；额度定案每出口 IP 精确 50 条（4 出口对照实测），145 模型实测 74 个免 VIP 可用；含 OpenAI 兼容网关（IP 池轮换/错误映射）、演示页、Playwright 验证、三轮压测与 new-api 对接交接书

Community Ola scooter CAN reference: versioned message catalogs, decoded signals, source evidence, and contribution templates.

Ask Me Anything v1.7.0 逆向分析 — Now AI 白标 SaaS 协议还原（HMAC-SHA512 通行证 + SSE）+ 本地 OpenAI 兼容网关 / demo / 压测

Animefy v2.37.10186 (com.picastory.ins.editor) APK 逆向 → OpenAI 兼容 2API：匿名自造 userid + MD5 秒级签名全链路还原、effectType 引擎路由（2402/9999/2501 实测出图）、demo 面板、阶梯压测、Playwright e2e、new-api 对接指南

Scoped game asset extraction via coding agents using REA.

Amor AI 1.8.8 (com.amorai.chat) reverse-engineered to OpenAI-compatible 2API gateway: persona-replicated chat, mock/real modes, demo page, benchmark, Playwright e2e

Sweet AI v1.9.8 (com.mxxtech.sweetai) APK 逆向 → OpenAI 兼容 2API: Volley+query 真实聊天入口、AES-256-CFB 加密信封、libprmp.so native getAppSecret(sha1 双层密钥) Unicorn 全函数仿真、demo 面板、472 req/s 压测、Playwright 浏览器验证、new-api 对接指南（上游 platform 层当前不可用，就绪但阻塞）

Wonder AI Art Generator v5.1.4 (com.codeway.wonder) APK 逆向 → OpenAI 兼容 2API：Flutter AOT/blutter 还原 rs 签名 + ip 高级版标记 + 毫秒时间窗；含 FastAPI 网关、零依赖 Demo、三轮压测(40/40,30/30,24/24)、Playwright 浏览器验证、53 风格表、new-api 对接指南

Viddo v4.0.4.1 (energysh/Flutter) APK 逆向: 双域 API 协议还原(RSA+md5签名 / 3DES信封) + 零鉴权造号 + 积分体系测绘 + 本地网关/demo + 压测; 生成执行受服务端共用表阻断(R1)

Genie v7.9.2 (co.appnation.geniechat) APK 逆向 → OpenAI 兼容 2API：Flutter AOT/Blutter 全量还原 Dart 协议 + Firebase 匿名凭证自动铸造 + 号池自动轮换；含 demo 面板、三档并发压测(82 请求零失败)、Playwright 浏览器验证、new-api 对接指南（凭证已脱敏）

PicGo AI Image Generator v2.0.8 APK 逆向：协议 100% 还原 + FastAPI 网关复刻 + 风格模板导出（上游 runpod 算力已死 → 归档，不可入池）

Scripts for reverse engineering: headless Ghidra scripts, PE and .NET helpers, a log redactor, a small dashboard and a local-model function labeler.

Minecraft 3DS 3D mod: real stereoscopic 3D for Minecraft: New Nintendo 3DS Edition, with comfort settings that make 3D easy on the eyes, smoother play and an A/B button swap. Simple Luma plugin, just copy one file to your SD card. Made by MattVidPro with Claude AI.

Armored Core VI on a 5:4 CRT: a D3D12 hook renders the 3D natively at 5:4, and a Scaleform toolchain re-lays the HUD.

Metal Gear Solid 4 (Master Collection) on a 5:4 CRT: the 3D shown whole, every HUD sprite kept at its true shape.

A One For All URC7985 remote reverse-engineered over Bluetooth, both chips patched into custom firmware, plus a desktop app.

The app is gone, the diffuser is not. Local, cloud-free Bluetooth control for the iMist aroma diffuser in Home Assistant – live state, schedules, sleep timer and a sidebar panel.

🖱️ The missing Linux app for the Lingbao M8 gaming mouse: DPI, polling rate, sleep and sensor settings over USB or 2.4 GHz, in your browser via WebHID. Reverse-engineered from the Windows driver.

Command-line edition of Fathom: headless.exe and the x64dbg-based debug engine for x64 and x32, without the GUI. Scripts, stdin, PowerShell templates, Python, TraceExport (JSON/CSV/Tenet/Frinet).

Research toolkit and queue-backed service for session parity work

Agent Skill that teaches AI coding agents to reverse engineer how things work: programs, file formats, protocols, devices and processes, evidence-first. Works in Claude Code, Qwen Code, Codex and any Agent Skills host.

Drive x64dbg from Python: x64dbg plugin + standard-library client, examples and headless.exe templates (breakpoints, stepping, memory, API hooks, traces).

Native-Windows, WinDbg-style memory inspector for kernel dumps, raw images and live Hyper-V VMs, with MCP / gdbserver / DAP server modes. One Python file on MemProcFS.

Functional decompilation of Kuru Kuru Kururin (GBA, Europe) with a native PC port. No game data included.

🔊 Control JBL PartyBox speakers from Home Assistant over Bluetooth: sidebar panel, MQTT entities, auto reconnect. Reverse-engineered protocol.

PE unpacker built on the Win32 Debug API — OEP detection, memory dump and IAT reconstruction (C++)

Unofficial, experimental Linux shell for the Wuwa Tappo desktop pet. Research/learning project, not affiliated with Kuro Games. Use at your own risk.

Exposes the 200+ REA (rea-agents) MCP tools to DeepSeek Harness three calls at a time: rea_tools → rea_help → rea_call. Requires rea-agents and Ghidra 12.1.x installed separately.

Convert x64dbg execution traces (.trace64/.trace32) to JSON/CSV (Tenet planned) — the TraceExport feature as a standalone x64dbg plugin candidate. See x64dbg/x64dbg#4006.

Matching decompilation of Touhou 8, built and verified on Linux through Wine

网关管家 · 桌面版：本机 AI 网关聚合与提示词注入，OpenAI/Anthropic 兼容 + 可观测/可灰度/可回滚（Go 单文件，Windows/Linux/macOS）

Rollerbot: A Time Journey (2000) for Android / AYN Thor + Linux Flatpak. About 85%. All 14 levels run with organized menus and dual-screen main menu. Android emulator smoke tests pass; real device testing pending. Bring your own game.

Локальный пульт для колонок SberBoom: Android + Windows, только Wi-Fi, без облака и аккаунта Сбера

Educational writeups for the CyLab Security Academy challenge library (formerly picoCTF) - step-by-step walkthroughs across 6 categories

bx - a tiny, static ELF64 binary explorer written in x86-64 assembly. No libc, no runtime dependencies.

Reverse engineering portfolio featuring x86 Assembly, Windows APIs, IDA-based analysis, C reconstruction, and binary patching of Windows executables.

WebDNA Studio — AI-Native Design Engineering & 1:1 Runtime Extraction Engine (Chrome MV3 + MCP Server)

Byte-0-scope - Interactive binary data visualizer / Байт-0-скоп - Визуализатор бинарных данных

Technical post-mortem and one-click fix for Tomb Raider: Legend 0x300144eb startup crash on Windows 11.

Glovy AI Photo Generator 1.9.0 逆向 -> Apero 网关 2API: 文生图/图生图/图生视频/11 项图像处理 + OpenAI 兼容网关 + demo + 压测

AI Writer v1.0.10 (com.smartwidgetlabs.ai.writer) APK reverse engineering + pure-protocol 2API: client-side self-signed HS256 JWT from Firebase Remote Config defaults, upstream Azure OpenAI (gpt-5-mini/gpt-5-nano). OpenAI-compatible gateway + demo console + stress bench.

Reverse-engineer any video, shot by shot: tells whether each shot was filmed, AI-generated or coded, how the captions, cuts and audio were made, and how to remake it. 逆向一切视频，逐镜拆出制作方式并给出复刻方案。

Read Hopoo HPCS-330 handheld spectrometers over USB from Python: spectrum, lux, CCT, CRI, PPFD. Protocol notes included.

CTF write-ups on Android Intent vulnerabilities: exported components, deep links, intent redirection