Frida • A world-class dynamic instrumentation toolkit

Relyze - Interactive x86, x64, ARM32 and ARM64 software reverse engineering

Relyze lets you disassemble, decompile and binary diff native code software.

REA — Reverse Engineer Anything

Inspect apps, binaries and runtime behavior with your coding agent or terminal. REA connects local analysis tools through CLI and MCP.

PANDA.re

PANDA is an open-source Platform for Architecture-Neutral Dynamic Analysis. It is built upon the QEMU whole system emulator, and so analyses have access to all code executing in the guest and all data. PANDA adds the ability to record and replay executions, enabling iterative, deep, whole system analyses. PANDA can be controlled from the command line, through our Python package, or even a Jupyter notebook.

Kernel Probes (Kprobes) — The Linux Kernel documentation

Kprobes enables you to dynamically break into any kernel routine and collect debugging and performance information non-disruptively. You can trap at almost any kernel code address [1], specifying a handler routine to be invoked when the breakpoint is hit.

Mount Thor — AI Execution Environments on Apple Hardware

Managed macOS environments for AI workloads that require native desktop access, persistent state, or model inference on Apple silicon.

morluto/rea

Reverse engineer anything with agents, from app behavior down to native binaries.

angr — the binary analysis platform

The powerful, user-friendly Python platform for analyzing binaries. Decompilation, symbolic execution, and more in one scriptable toolkit.

Composio

Just-in-time tool calls, secure delegated auth, sandboxed environments, and parallel execution across 1,000+ apps.

Commix Project | Automated All-in-One OS Command Injection Exploitation Tool.

Automated exploitation of command and code injection flaws, from detection to full control of the underlying operating system.

cua/blog/inside-macos-window-internals.md at main · trycua/cua

Open-source infrastructure for Computer-Use Agents. Sandboxes, SDKs, and benchmarks to train and evaluate AI agents that can control full desktops (macOS, Linux, Windows). - trycua/cua

Triton: A dynamic binary analysis library

Triton: A dynamic binary analysis library

qilingframework/qiling

A True Instrumentable Binary Emulation Framework

mitchellh/libxev

libxev is a cross-platform, high-performance event loop that provides abstractions for non-blocking IO, timers, events, and more and works on Linux (io_uring or epoll), macOS (kqueue), and Wasm + WASI. Available as both a Zig and C API.

Genode - Genode Operating System Framework

We understand the complexity of code and policy as the most fundamental security problem shared by modern general-purpose operating systems. Because of high functional demands and dynamic workloads, however, this complexity cannot be avoided. But it can be organized. Genode is a novel OS architecture that is able to master complexity by applying a strict organizational structure to all software components including device drivers, system services, and applications. The Genode OS framework is an open-source tool kit for building highly secure component-based operating systems. It scales from embedded devices to dynamic general-purpose computing.

Daytona - Secure Infrastructure for Running AI-Generated Code

Deploy Al code with confidence using Daytona's lightning-fast infrastructure. 90ms environment creation, stateful operations, and enterprise-grade security.