Open Source C++ Reverse Engineering Tools

Cutter is a free and open-source graphical reverse-engineering platform powered by the Rizin framework. It provides a visual interface for inspecting binaries, functions, strings, references, control flow, and low-level program structure. The application is designed to make advanced binary analysis more approachable without sacrificing access to Rizin’s underlying capabilities. Its interface can be extended with Python and native C++ plugins. Community integrations add features such as decompilers and code-coverage visualization. Cutter runs on Linux, macOS, and Windows and is distributed through native packages, portable builds, and Docker-based options. It is intended for software analysis, debugging, research, and authorized security work.

ImHex is a free, open-source hex editor designed for reverse engineers, software developers, cybersecurity professionals, and digital forensics analysts. The software provides advanced tools for inspecting, editing, and analyzing binary files through a modern, customizable interface. ImHex features a powerful Pattern Language that allows users to define custom data structures, parse complex file formats, and visualize binary information. Its integrated disassembler, data inspector, entropy analyzer, and YARA scanning capabilities make it suitable for malware analysis, vulnerability research, and reverse engineering. The platform supports large files, process memory inspection, remote file access, and advanced searching across multiple data formats and encodings. Available for Windows, macOS, Linux, and FreeBSD, ImHex combines powerful binary analysis capabilities with a user-friendly interface, extensive customization options, and an expandable ecosystem of plugins and patterns.

Open-source, cross-platform Qt based IDE for reverse-engineering Android application packages. It features a friendly IDE-like layout including code editor with syntax highlighting support for *.smali code files. If you are just willing to quickly decompile an Android app, you can make use of DeAPK - Online APK Decompiler which lets you decompile an Android app using apktool and jadx.

BinExport is a disassembly export plugin developed by Google as part of the BinDiff ecosystem, designed for reverse engineering and binary analysis. It works with popular disassemblers including IDA Pro, Binary Ninja, and Ghidra, enabling the export of disassembly data into a structured Protocol Buffer format. This exported data can then be used for binary comparison, diffing, and advanced analysis tasks through BinDiff or other compatible tools. BinExport captures detailed information such as instructions, functions, control flow graphs, and metadata, providing a machine-readable representation of a program’s disassembled structure. It supports multiple export formats, including binary, text, and statistics outputs, and can be used interactively or via scripting (IDC, IDAPython, or Ghidra’s headless mode). The project includes complete build instructions for Linux, macOS, and Windows, ensuring reproducibility across platforms.

iaito is a free, open-source graphical interface for radare2, a reverse engineering and binary analysis framework. Built with Qt, it provides an accessible environment for examining executable files and understanding program structures. The software combines disassembly, binary inspection, and program analysis tools within a unified interface. Users can investigate functions, examine memory contents, and explore relationships between different sections of a program. It also supports binary patching, forensic analysis, and binary comparison workflows. iaito maintains compatibility with radare2 commands, plugins, and scripts, allowing users to extend its capabilities. Available for Windows, macOS, and Linux, it helps security researchers, developers, and reverse engineers analyze compiled software.

After a program has been thrown into the world in binary form, it can boomerang back as source code. The Boomerang reverse engineering framework is the first general native executable decompiler available to the public.

ReHex is a cross-platform hexadecimal editor designed for reverse engineering, binary analysis, and low-level file manipulation. It supports editing extremely large files exceeding one terabyte. Users can inspect raw bytes and decode integer, floating-point, and text representations. Inline machine code disassembly helps analyze executable instructions directly within binary files. Advanced tools allow byte ranges to be highlighted, annotated, and mapped to virtual addresses. A comparison feature identifies differences between complete files or selected regions. Binary templates automatically interpret structured data, while Lua scripting enables custom analysis workflows. Additional functionality includes bitmap visualization, bit manipulation, checksums, and Intel HEX importing and exporting. ReHex runs on Windows, macOS, Linux, and BSD.

RisohEditor is a Windows resource editor designed for creating, inspecting, and modifying resources used in Win32 applications. It supports reading and writing resource data in RC, RES, EXE, and DLL files. Developers can work with dialogs, menus, icons, cursors, string tables, and other Windows resource types. Its graphical interface organizes resources for easier navigation and editing. The application supports UTF-16 resource files for handling multilingual content. It also provides tools for working with resource identifiers and maintaining consistency across projects. Portable and installer versions are available, with the portable edition storing preferences in an INI file. RisohEditor supports both 32-bit and 64-bit Windows environments, as well as ReactOS.

GenDasm is a Generic Code-Seeking Diassembler engine. It allows you to enter known starting vectors for a given code image for the micro. It will disassemble the code and follow through branches to assist in the separation of code and data. Its included Fuzzy Function Analyzer companion uses a DNA Sequence Alignment Algorithm to locate similar code in multiple binaries to facilitate reverse-engineering and/or code recovery. The original purpose of the Fuzzy Function Analyzer was to assist in code recovery where the source code for the current binaries got lost, yet the source code for an old binary was retained. The Fuzzy Function Analyzer allows you to match up known functions between the two binaries so you can concentrate on disassembling and reverse engineering the parts that are different and recover the code for the current binary that got lost.