RE_Tools

​ 本项目集成了全网优秀的逆向工具，包含.NET逆向工具，ARK工具，HEX工具，PE工具，安卓逆向工具，调试工具，监控工具，密码工具，网络工具。

免责声明

重点提醒：本项目工具来源于互联网，是否含带木马及后门请自行甄别！

本项目所有内容，仅供学习和研究使用，请勿使用项目的技术手段用于非法用途。

目录

• .NET逆向工具
• ARK工具
• HEX工具
• PE工具
• 安卓逆向工具
• 反汇编工具
• 调试工具
• 监控工具
• 密码工具
• 网络工具
• 插件

.NET逆向工具

• GitHub - dnSpy/dnSpy: .NET debugger and assembly editor
• GitHub - icsharpcode/ILSpy: .NET Decompiler with support for PDB generation
• dotPeek: Free .NET Decompiler & Assembly Browser by JetBrains

ARK工具

• GitHub - szdyg/HRSword: 火绒剑独立版

• GitHub - ClownQq/YDArk: X64内核小工具

• GitHub - k273811702/NoOne: 一款windows64位的ark工具 rootkit

• ATOOL | 安天实验室

• PCHunter

HEX工具

• 010 Editor - Pro Text/Hex Editor

• WinHex: Hex Editor & Disk Editor

PE工具

• GitHub - ExeinfoASL/Exeinfo: exeinfo PE for Windows by A.S.L

• PEiD

• GitHub - horsicq/Detect-It-Easy: Program for determining types of files

• PPEE - Professional PE Explorer (mzrst.com)

• EquiFox/KsDumper: Dumping processes using the power of kernel space !

安卓逆向工具

• GitHub - skylot/jadx: Dex to Java decompiler

• JEB Decompiler by PNF Software

• GitHub - iBotPeaches/Apktool: A tool for reverse engineering Android apk files

反汇编工具

• IDA Pro: Hex Rays – State-of-the-art binary code analysis solutions (hex-rays.com)
• GitHub - avast/retdec: RetDec is a retargetable machine-code decompiler based on LLVM
• GitHub - NationalSecurityAgency/ghidra: Ghidra is a software reverse engineering (SRE) framework

调试工具

• GitHub - x64dbg/x64dbg: An open-source user mode debugger for Windows
• OllyDbg v1.10
• WinDbg - Windows drivers | Microsoft Learn
• Cheat Engine
• DebugView - Sysinternals | Microsoft Learn

监控工具

API

• API Monitor
• WinAPIOverride : Free Advanced API Monitor, spy or override API or exe internal functions

Share Memory

• MemMapView

Process

• Overview - System Informer
• 进程资源管理器 - Sysinternals | Microsoft Learn
• hzqst/Syscall-Monitor: Syscall Monitor is a system monitor program (like Sysinternal's Process Monitor) using Intel VT-X/EPT for Windows7+
• Windows 性能工具包 | Microsoft Learn
• 应用程序验证程序 - 概述 - Windows drivers | Microsoft Learn

Window

• GitHub - strobejb/winspy: WinSpy++

Registry

• RegSnap - Registry Tracer

密码工具

• CyberChef

网络工具

• Web Debugging Proxy and Troubleshooting Tools|Fiddler (telerik.com)
• Wireshark · Go Deep
• HTTP Debugger - Debug HTTP API Calls to Back-ends

插件

IDA

• GitHub - 0xjiayu/go_parser: Yet Another Golang binary parser for IDAPro
• GitHub - polymorf/findcrypt-yara: IDA pro plugin to find crypto constants
• GitHub - sibears/IDAGolangHelper: Set of IDA Pro scripts for parsing GoLang
• GitHub - fjqisba/E-Decompiler: 用来辅助分析易语言程序的IDA插件
• GitHub - joydo/d810
• GitHub - 0xgalz/Virtuailor: IDAPython tool for creating automatic C++ virtual tables in IDA Pro
• GitHub - anatolikalysch/VMAttack: VMAttack PlugIn for IDA Pro

x64dbg

• x64dbg/ScyllaHide: Advanced usermode anti-anti-debugger. Forked from https://bitbucket.org/NtQuery/scyllahide