What do you want to do?
5 use cases
-
Learn assembly and reversing basics for free
Pick free courses and browser tools to start reading compiled code and assembly.
View prompt
Using the awesome-reverse-engineering list in the morluto/awesome-reverse-engineering repo, pick one beginner resource from its Learning section and suggest a 3-step study plan for a learner who knows basic C. Expected output: a numbered plan with one link per step. Verify that every link appears in the Learning section of the README.
-
Triage an unknown executable to see what it can do
Combine capability, format, and string tools for a first look at a binary.
- Awesome Reverse Engineering
- Security and science
- Intermediate
View prompt
Using the morluto/awesome-reverse-engineering list, select the triage tools from its File identification and triage section that fit a Windows PE file. Run or describe the steps for <target-file> and report the file type, notable imports, and capabilities. Verify that the report states that checksec flags are not a vulnerability verdict if you include ELF checks.
-
Trace calls in a running program with Frida
Inject scripts into a process you are authorized to test to observe its behavior.
View prompt
Using the morluto/awesome-reverse-engineering list, confirm that Frida is listed under Dynamic instrumentation and tracing, then outline a Frida hook plan for the process <target-process>. Expected output: a short plan listing the functions to hook and what to log. Verify that the plan only targets a process the user is authorized to test.
-
Run a suspicious sample in an automated sandbox
Use CAPE Sandbox to record behavior and payloads from a malware sample.
View prompt
Using the morluto/awesome-reverse-engineering list, outline a sandbox workflow for <sample-file> that uses only tools in its Malware analysis section. Expected output: a checklist covering isolation, submission, and report review. Verify that the checklist starts with an isolated virtual machine requirement.
-
Map IPC channels and preload bridges in an Electron app
Use hexvero to scan an Electron archive for IPC channels and window settings.
- Awesome Reverse Engineering
- Security and science
- Intermediate
View prompt
Using the morluto/awesome-reverse-engineering list, summarize what hexvero reports for <electron-archive> and list the IPC channels and preload bridges it finds. Expected output: a table of channels with their source files. Verify that the report notes the limitation about indirect code.
How to use Awesome Reverse Engineering
- Check you have what it needs: A computer where you can install analysis tools, or a browser for web-based tools; A target to study, such as a sample binary you are authorized to analyze or a course lab; For malware or sandbox work: an isolated, disposable virtual machine and your organization's handling procedures.
- Open morluto/awesome-reverse-engineering on GitHub and read the README and license.
- Open Compiler Explorer at https://godbolt.org/ and compile a small C function to see its assembly output.
- Read the ARM assembly tutorials at https://azeria-labs.com/writing-arm-assembly-part-1/ and do the exercises for registers and memory.
- Look at the visual format posters from Corkami at https://github.com/corkami/pics to see how executable files are laid out.
- Choose one structured course such as pwn.college at https://pwn.college/ or OpenSecurityTraining2 at https://ost2.fyi/ and work through its first module.
These steps come from our top use case, Learn assembly and reversing basics for free, which also has a copy-paste agent prompt.
Get 5 new use cases every morning. Free, one short email, unsubscribe anytime.
Get them freeAwesome Reverse Engineering alternatives · Best AI repos for Security and science
About this repo
- Who it is forWritten for security researchers, malware analysts, and students who need to pick the right reverse-engineering tool or course for a specific task.
- Why it is hot
- LanguagePython
- Sourcegithub.com/morluto/awesome-reverse-engineering · Back to Hot repos
Requirements
- A computer where you can install analysis tools, or a browser for web-based tools
- A target to study, such as a sample binary you are authorized to analyze or a course lab
- For malware or sandbox work: an isolated, disposable virtual machine and your organization's handling procedures
- For the Electron triage tool: Node.js 22.12 or later, as the README states
Maintain Awesome Reverse Engineering? Add the Featured on Deduped badge
Paste this into your README:
[](https://dedupedai.com/use-cases/morluto-awesome-reverse-engineering/?ref=badge)
Questions about Awesome Reverse Engineering
What is Awesome Reverse Engineering?
A curated list of reverse-engineering tools and learning resources for binaries, apps, firmware, file formats, and protocols. It is an open-source project on GitHub: https://github.com/morluto/awesome-reverse-engineering.
Who is Awesome Reverse Engineering for?
Written for security researchers, malware analysts, and students who need to pick the right reverse-engineering tool or course for a specific task.
What can I do with Awesome Reverse Engineering?
5 use cases so far, for example: Learn assembly and reversing basics for free; Triage an unknown executable to see what it can do; Trace calls in a running program with Frida. Each has steps and a copy-paste agent prompt.
What do I need to run Awesome Reverse Engineering?
A computer where you can install analysis tools, or a browser for web-based tools; A target to study, such as a sample binary you are authorized to analyze or a course lab; For malware or sandbox work: an isolated, disposable virtual machine and your organization's handling procedures; For the Electron triage tool: Node.js 22.12 or later, as the README states.
What are alternatives to Awesome Reverse Engineering?
Other hot AI repos in Security and science: Rea, Reverify, Ablation, Claude AD, Awesome Reverse Engineered.
Is Awesome Reverse Engineering safe to run?
Deduped does not own, audit or vouch for it. Read the README and license, run it on your own systems first and review every command before you run it.