Open source reverse-engineering projects
Every project in the registry tagged reverse-engineering, ranked by real GitHub adoption.
Open-source, cross platform Qt6 based IDE for reverse-engineering Android application packages. It features a friendly IDE-like layout including code editor wit
Database documentation built easy
AI Agent-first JS 逆向 MCP Server：有头 Chrome 调试、断点、网络/WebSocket 分析、Patchright 反检测，可选 CloakBrowser。
A simple & straight-to-the-point PHP profiling extension with its built-in web UI
🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineerin
cwe_checker finds vulnerable patterns in binary executables
Local HTTPS and MQTT cloud emulator for Roborock vacuums without rooting or hardware modifications
A private Lumina server for IDA Pro
HydraSoft: dependency-free Windows DLL hijack scanner with centralized remote management — HydraAgent, PHP API, and a web console for endpoint security checks a
js cookie逆向利器：js cookie变动监控可视化工具 & js cookie hook打条件断点
A reversing plugin for cross-decompiler collaboration, built on git.
Documenting the unofficial and internal Steam Web API
Frequently asked questions
How many open source reverse-engineering projects are there?
This registry tracks 12 projects tagged reverse-engineering, with 22,924 GitHub stars between them. The most-adopted is apkstudio at 4,736 stars.
Are these reverse-engineering projects free to use?
Yes — 12 of the 12 carry an explicit open-source licence across 5 distinct licences, so there is no licence fee. Where a project also sells a hosted or enterprise version, the self-hosted path remains free.
Which reverse-engineering project should I choose?
The list above is ranked by GitHub stars, but stars measure attention rather than fit. Check three things on each card: the licence (permissive versus copyleft), the language it is written in, and the last-push date — a high-star project that has not been pushed in a year is a liability.
Are these reverse-engineering projects still maintained?
10 of the 12 were pushed in the last 90 days, and every card shows its exact last-push date so you can see the rest. Sort your shortlist by that date before committing to a migration.