| Tool | |
|---|---|
| URL | |
| Target | |
| Cost | |
| Description | |
| useful for | |
| similar Tools |
| Tool | Immunity Debugger |
|---|---|
| URL | https://www.immunityinc.com/products/debugger/ |
| Target | Windows EXE/PE files |
| Cost | Free |
| Description | - debugger designed for malware reversing but mostly for exploit development - connectivity to fuzzers and exploit development tools - commands can be extended in Python as well, like mona.py |
| useful for | - powerful new ways to write exploits, - analyze malware, and reverse engineer binary files |
| similar Tools | Olly Debugger, Immunity Debugger, WinDbg, x64dbg/x32dbg |
| Tool | Olly Debugger |
|---|---|
| URL | http://www.ollydbg.de/ |
| Target | Windows EXE/PE files |
| Cost | Free |
| Description | - debugger that emphasizes binary code analysis |
| useful for | - reverse engineer binary files - unpacking known packers - used this with OllyDbg_Plugins |
| similar Tools | Immunity Debugger, WinDbg, x64dbg/x32dbg |
| Tool | WinDbg |
|---|---|
| URL | Download Debugging Tools for Windows - WinDbg - Windows drivers | Microsoft Docs |
| Target | Windows EXE/PE files |
| Cost | Free |
| Description | - multipurpose debugger for the Microsoft Windows computer operating system |
| useful for | - finding unpacked/unencrypted strings in a file |
| similar Tools | Immunity Debugger, Olly Debugger, x64dbg/x32dbg |
| Tool | IL Spy |
|---|---|
| URL | GitHub - icsharpcode/ILSpy: .NET Decompiler with support for PDB generation, ReadyToRun, Metadata (&more) - cross-platform! |
| Target | Windows EXE/PE files |
| Cost | Free |
| Description | - .NET assembly browser and decompiler. |
| useful for | - for contextual analysis of a binary that was decompiled - code review written in C# |
| similar Tools | NET Reflector, dnSpy |
| Tool | JD - Gui |
|---|---|
| URL | http://java-decompiler.github.io/ |
| Target | Windows EXE/PE files |
| Cost | Free |
| Description | - tool used for decompile and analyze Java |
| useful for | - for quick triage on a java rat like (AdWind) |
| similar Tools | dirtyJOE |
| Tool | Radare2 |
|---|---|
| URL | GitHub - radareorg/radare2: UNIX-like reverse engineering framework and command-line toolset |
| Target | Windows, Linux, MacOS |
| Cost | free |
| Description | - forensics tools - analyzing binaries - disassembling code - debugging programs |
| useful for | - reverse engineering malware |
| similar Tools | - IdaPro, x64dbg/x43dbg |
| Tool | JustDecompile |
|---|---|
| URL | GitHub - telerik/JustDecompileEngine: The decompilation engine of JustDecompile |
| Target | Windows EXE/PE files |
| Cost | Free |
| Description | - easily, decompile the assembly language back to readable C#, VB and IL. |
| useful for | - decompiling .Net binaries and using JustDecompile-plugins |
| similar Tools | NET Reflector, dnSpy |
| Tool | |
|---|---|
| URL | |
| Target | |
| Cost | |
| Description | |
| useful for | |
| similar Tools |
| Tool | Gnu Debugger aka gdb |
|---|---|
| URL | Download GDB |
| Target | ELF format |
| Cost | Free |
| Description | - portable debugger that runs on many Unix-like systems - works for many programming languages, including Ada, C, C++, Objective-C, Free Pascal, Fortran, Go |
| useful for | - analyzing elf binaries |
| similar Tools | Windbg |
| Tool | Cutter - a graphical frontend to radare2 |
|---|---|
| URL | https://cutter.re/ |
| Target | |
| Cost | Free |
| Description | - code analysis framework powered by radare2 |
| useful for | - decompiling, analyzing code |
| similar Tools |
| Tool | Ghidra - a software reverse engineering suite |
|---|---|
| URL | https://ghidra-sre.org/ |
| Target | |
| Cost | Free |
| https://www.aldeid.com/wiki/PEiD | - software reverse engineering suite |
| useful for | - decompiling, analyzing code |
| similar Tools | - IdaPro, Radare2 |