常用逆向工具集合

桃扇骨 2022-10-27 15:50 247阅读 0赞

逆向工具集合

*  [Awesome-Hacking][]

## Java & Jar (Android) ##

*  [jd-gui][] jar包浏览工具,对应的IDE插件，JD-Eclipse/JD-IntelliJ
 *  [Luyten][] An Open Source Java Decompiler Gui for Procyon
 *  [jadx-gui][] 直接反编译apk
 *  [Apktool][] apk的反编译,编译工具(smali格式)
 *  [dex2jar][] dex转为jar工具
 *  [AXMLPrinter][] XML浏览工具
 *  [androguard][] 使用DAD作为反编译器，可以分析恶意软件的可视化软件
 *  [Enjarify][] Google官方逆向分析工具(Dalvik字节码 -> Java),需python环境
 *  [ClassyShark][] Google官方dex/apk/jar/class/aar浏览工具
 *  APK Analyzer(AndroidStudio 2.2+) Google官方APK分析工具, [making-the-most-of-the-apk-analyzer][]
 *  [Smali/baksmali][Smali_baksmali] APK文件编辑工具
 *  [Smali2Java][] APK图形化浏览工具
 *  [CodeInspect][]
 *  [bytecodeviewer][]
 *  [APKIDE][] 国人开发综合图形化工具
 *  [bytecode-viewer][bytecodeviewer] 集成了J-RET,JHexPane, Dex2Jar等多个反编译工具
 *  [JEB][] 商业反编译软件,支持动态编辑
 *  [RADARE2][] 可以反汇编、调试、分析和操作二进制文件
 *  [Simplify][] 反混淆工具
 *  [JAD][] Java反编译工具
 *  [Introspy][] 黑盒测试工具
 *  [ApkStudio][] 跨平台逆向IDE
 *  [APK DeGuard][] 在线Android反编译工具

> Hook Tools

*  [Xposed Framework][] 运行时修改系统或应用程序方面和行为
 *  [Cydia Substrate][] 注入
 *  [ADBI][] & [DDI][] 动态跟踪工具
 *  [Frida][DDI] & [Diff-GUI][] JavaScript 注入

> Android 漏洞查询

*  [Android Vulnerabilties][]
 *  [Android CVE Details][]

## C++ & So (Android) ##

*  [IDAPro][] 最强大的静态逆向分析工具,没有之一 [IDA Pro 6.8 + All Decompilers Full Leak][IDA Pro 6.8 _ All Decompilers Full Leak]

## C\# & Dll & EXE ##

*  [ILSpy][](免费) 直接使用,dll查看工具
 *  [.Net Reflector][] & Reflexil RedGate开发的.Net逆向工具(反编译查看)[加上Reflexil插件][Reflexil](开源)用于编辑,修改/注入
 *  [Dependency Walker][]
 *  [dotPeek][]
 *  [De4Dot(开源) 脱壳/反混淆工具][De4Dot_]  
    使用: de4dot.exe xx.dll -p un
 *  [DILE Dotnet IL Editor][] 调试工具
 *  ilasm & ildasm(微软官方) 把IL文件重新生成DLL的功能,[使用参考][Link 1]
 *  [Just Decompile][] 反编译工具
 *  [Dotfuscator][], Visual Studio自带 混淆工具, 目录为"\*\*\\Microsoft Visual Studio 14.0\\PreEmptive Solutions\\Dotfuscator and Analytics CommunityEdition\\dotfuscator.exe "
 *  [Codeguard][] 混淆工具
 *  [Reactor][] 混淆工具
 *  [xeoncode][] 混淆工具 [破解版][Link 2](64位不可用)
 *  [ConfuserEx][](开源)混淆工具, [下载地址][Link 3]
 *  [OllyDbg][]

## iOS ##

*  [IDA Pro][IDAPro] 反汇编工具 (Windows,Linux, Mac OS X) & [Hopper][] (Mac OS X)
 *  [Reveal][] & [PonyDebugger][] UI分析利器
 *  [iFunbox][] & [iExplorer][] & [iTools][] 文件查看工具
 *  [Charles][] 网络分析工具
 *  [Cycript][] 调试器
 *  [LLDB][]
 *  [snoop-it][] 查看类信息，调试调用类的方法
 *  [introspy][Introspy]
 *  [class-dump][]

> Hook Tools

*  [Theos][] 越狱程序开发框架
 *  [iOSOpenDev][]

## Others ##

*  [Frida][] 动态二进制插桩(Dynamic Binary Instrumentation)框架, [使用Frida来hack安卓APP（一）][Frida_hack_APP]

## 实用参考   ##

[https://www.oschina.net/project/tag/317/decompiler][https_www.oschina.net_project_tag_317_decompiler]

*  [权威论坛-看雪][-]
 *  [看雪iOS安全小组 置顶向导集合贴][iOS_]
 *  [Android安全中文站][Android]
 *  [<<iOS应用逆向工程>> 论坛][iOS_ 1]
 *  [iOS 安全 Wiki][iOS _ Wiki]
 *  [关于 .Net 逆向的那些工具：反编译篇][.Net]
 *  [破解NET的四大神器][NET]
 *  [破解Java to C\# Converter][Java to C_ Converter]

[Awesome-Hacking]: https://github.com/Hack-with-Github/Awesome-Hacking
[jd-gui]: http://jd.benow.ca/
[Luyten]: https://github.com/deathmarine/Luyten
[jadx-gui]: https://github.com/skylot/jadx
[Apktool]: https://ibotpeaches.github.io/Apktool/
[dex2jar]: https://github.com/pxb1988/dex2jar
[AXMLPrinter]: https://www.nuget.org/packages/axmlprinter
[androguard]: https://github.com/androguard/androguard
[Enjarify]: https://github.com/google/enjarify
[ClassyShark]: https://github.com/google/android-classyshark
[making-the-most-of-the-apk-analyzer]: https://medium.com/google-developers/making-the-most-of-the-apk-analyzer-c066cb871ea2
[Smali_baksmali]: https://github.com/JesusFreke/smali/wiki/smalidea
[Smali2Java]: http://www.hensence.com/cn/smali2java
[CodeInspect]: https://blogs.uni-paderborn.de/sse/tools/codeinspect/
[bytecodeviewer]: https://bytecodeviewer.com/
[APKIDE]: http://www.xiaomiren.net/
[JEB]: https://www.pnfsoftware.com/
[RADARE2]: https://github.com/radare/radare2
[Simplify]: https://github.com/CalebFenton/simplify
[JAD]: https://varaneckas.com/jad/
[Introspy]: https://github.com/iSECPartners/Introspy-iOS
[ApkStudio]: https://github.com/vaibhavpandeyvpz/apkstudio
[APK DeGuard]: http://apk-deguard.com/
[Xposed Framework]: http://repo.xposed.info/
[Cydia Substrate]: http://www.cydiasubstrate.com/
[ADBI]: https://github.com/samsung/adbi
[DDI]: https://github.com/crmulliner/ddi
[Diff-GUI]: https://github.com/antojoseph/diff-gui
[Android Vulnerabilties]: http://androidvulnerabilities.org/
[Android CVE Details]: http://www.cvedetails.com/vulnerability-list/vendor_id-1224/product_id-19997/Google-Android.html
[IDAPro]: https://www.hex-rays.com/products/ida/index.shtml
[IDA Pro 6.8 _ All Decompilers Full Leak]: http://www.52pojie.cn/forum.php?mod=viewthread&tid=442702&extra=page%3D1%26filter%3Dtypeid%26typeid%3D123
[ILSpy]: http://ilspy.net/
[.Net Reflector]: http://www.red-gate.com/products/dotnet-development/reflector/
[Reflexil]: https://github.com/sailro/reflexil
[Dependency Walker]: http://www.dependencywalker.com/
[dotPeek]: https://www.jetbrains.com/decompiler/
[De4Dot_]: https://github.com/0xd4d/de4dot
[DILE Dotnet IL Editor]: https://sourceforge.net/projects/dile/
[Link 1]: http://www.cnblogs.com/dudu/archive/2011/05/17/ildasm_ilasm_il.html
[Just Decompile]: http://www.telerik.com/products/decompiler.aspx
[Dotfuscator]: https://www.preemptive.com/products/dotfuscator/overview
[Codeguard]: https://www.codeguard.com/
[Reactor]: https://projectreactor.io/
[xeoncode]: https://turbo.net/studio
[Link 2]: http://download.csdn.net/detail/sndntdkj/6521975
[ConfuserEx]: https://yck1509.github.io/ConfuserEx/
[Link 3]: https://github.com/yck1509/ConfuserEx/releases
[OllyDbg]: http://www.ollydbg.de/
[Hopper]: https://www.hopperapp.com/
[Reveal]: https://revealapp.com/
[PonyDebugger]: https://github.com/square/PonyDebugger
[iFunbox]: http://www.i-funbox.com/zh-cn_index.html
[iExplorer]: https://iexplorer.en.softonic.com/
[iTools]: http://www.itools.cn/
[Charles]: https://www.charlesproxy.com/
[Cycript]: http://www.cycript.org/
[LLDB]: https://lldb.llvm.org/
[snoop-it]: https://code.google.com/archive/p/snoop-it/
[class-dump]: http://stevenygard.com/projects/class-dump/
[Theos]: http://iphonedevwiki.net/index.php/Theos/Setup
[iOSOpenDev]: http://www.iosopendev.com/
[Frida]: https://www.frida.re/
[Frida_hack_APP]: http://bbs.pediy.com/thread-216645.htm
[https_www.oschina.net_project_tag_317_decompiler]: https://www.oschina.net/project/tag/317/decompiler
[-]: http://www.kanxue.com/
[iOS_]: http://bbs.pediy.com/thread-212685.htm
[Android]: http://www.droidsec.cn/
[iOS_ 1]: http://bbs.iosre.com/
[iOS _ Wiki]: https://www.gitbook.com/book/wizardforcel/ios-sec-wiki/details
[.Net]: http://www.aneasystone.com/archives/2015/06/net-reverse-decompiling.html
[NET]: http://www.52pojie.cn/thread-174802-1-1.html
[Java to C_ Converter]: http://wzmlj.com/yiyan127/p/CSharp_CrackJava2CSharpConverter.html