All-In-One | Cheat Engine | [Open Source] A powerful, all-in-one game hacking tool with an extensive feature set. Varying versions for Mac, Linux, and Android can be found here. CE video tutorials here. |
All-In-One | Squalr | [Open Source] A performant game hacking tool developed in C# with features that both rival and complement Cheat Engine. |
All-In-One | CrySearch | [Open Source] A memory scanner akin to Cheat Engine, but with different features and a cleaner UI. |
All-In-One | PINCE | [Open Source] A front-end/reverse engineering tool for the GNU Project Debugger (GDB), focused on games. It's essentially a work-in-progress Cheat Engine for Linux/MacOS. |
All-In-One | Binary Ninja | [Commercial] A reverse engineering platform, hex editor, and interactive graph based disassembler. |
All-In-One | Ghidra | [Open Source] a software reverse engineering framework including a suite of full-featured, high-end software analysis tools that enable users to analyze compiled code. Capabilities include disassembly, assembly, decompilation, graphing, and scripting, along with hundreds of other features. It is maintained by the NSA and requires Java |
Disassembler/Debugger | x64dbg | [Open Source] An x86 (bit)/x64 (bit) debugger for windows. Spiritual successor to OllyDbg. |
Disassembler/Debugger | WinDbg | [Freeware] Microsoft's official Windows debugger which allows for debugging of both kernel and user mode code. There is also a new version of WinDbg being built for Windows 10 (WinDbg Preview), featuring an updated UI, new features, and more. |
Disassembler/Debugger | Hopper | [Commercial] A powerful disassembler, decompiler, and debugger for macOS and Linux. |
Disassembler/Debugger/Decompiler | IDA Pro | [Commercial] A multi-processor disassembler and debugger that works on Windows, Linux, and Mac. This is the crème de la crème of disassemblers/Decompilers in many professional reverse engineer's toolkits. A limited freeware version of v can be obtained here. |
Graphics Debugger | RenderDoc | [Open Source] A stand-alone graphics debugging tool that allows quick and easy single-frame capture and detailed introspection of any application using Vulkan, D3D11, OpenGL, and OpenGL ES or D3D12 across Windows , Linux, or Android. Overview video here. |
Graphics Debugger | PIX | [Freeware] Performance tuning and debugging for DirectX games on Windows and Xbox. Blog here; video tutorial playlist here. |
Graphics Tool | Ninja Ripper | [Freeware] Utility to extract/rip 3D models (meshes), textures, and shaders directly from the running game. |
Hex Editor | HxD Hex Editor | [Freeware] A fast, basic hex editor. |
Hex Editor | Editor | [Commercial] Extremely powerful and robust hex/text editor. |
Hex Editor | Hexinator | [Commercial] A worthy " Editor" competitor with many different features. |
Hex Editor | Hex Workshop | [Commercial] A popular, feature-rich hex editor. |
.NET Decompiler/Re-Compiler/Debugger | dnSpy | [Open Source] A .NET assembly editor and debugger, including support for Unity games (Mono binaries). New versions allow direct editing of compiled code as though it were an IDE. |
.NET Decompiler | ILSpy | [Open Source] A .NET assembly browser and decompiler. |
Java Decompiler | JD-GUI | [Freeware] Displays Java source codes of “.class” files. You can browse the reconstructed source code with for instant access to methods and fields. |
Java Decompiler | Helios | [Open Source] An all-in-one Java reverse engineering tool, featuring integration with the latest, up-to-date decompilers (Krakatau, Fernflower, CFR, Procyon, Javap, etc.). |
Java Decompiler/Debugger | Bytecode Viewer | [Open Source] A Java 8 Jar and Android APK reverse engineering suite (decompiler, editor, debugger, and more). |
Java Editor | Recaf | [Open Source] Used to edit the binary of java games/apps without needing a hex editor or having to decompile and recompile classes. |
Java Editor | JByteMod | [Open Source] Used to edit the binary of java games/apps. It is able to decompile, analyze and compile bytecode. Generally more reliable than Recaf and has more features. |
Flash Decompiler | JPEXS | [Open Source] Extract resources, convert SWF to FLA, edit ActionScript, replace resources, and more. Works on Windows, Linux, and macOS. |
Flash Decompiler | Trillix | [Commercial] Converts SWF to FLA and decompiles Flash (supports Flash up to CS6 & CC and ActionScript ). |
Java Deobfuscator | Deobfuscator | [Open Source] An all-in-one Java deobfuscator which will deobfuscate code obfuscated by most obfuscators available on the market. Accompanying GUI here. |
Network/Traffic Inspector | Fiddler | [Freeware] A powerful web debugging proxy for any browser, system, or platform. |
Network/Traffic Inspector | Wireshark | [Freeware] A robust network protocol analyzer. |
Network/Traffic Inspector | Microsoft Message Analyzer | [Freeware] Enables you to capture, display, and analyze protocol messaging traffic--as well as trace and assess system events and other messages from Windows components. |
Process Inspector | Sysinternals - Process Monitor | [Freeware] An advanced monitoring tool for Windows that shows real-time file system, Registry and process/thread activity. Part of the Windows Sysinternals tool suite. |
Process Inspector | Sysinternals - Process Explorer | [Freeware] Details information about which handles and DLLs processes have opened or loaded. Discover files/directories a program has open, etc. Part of the Windows Sysinternals tool suite. |
Process Inspector | Process Hacker | [Open Source] A powerful, multi-purpose tool that helps you monitor system resources and debug software. |
Process Inspector | WinExplorer | [Open Source] Shows all of a system's windows and their properties, like handle, class name, caption, size, position, and more. Can modify certain properties for outcomes like making a game run in windowed mode in which it isn't a built-in feature. |
Function Inspector | CDA: Code Dynamic Analysis | [Freeware] Tool for recording, filtering, and hacking function calls within applications or games. x86 support only. Previously open-source and known as FunctionHacker. Tutorial video here. |
Function/API Inspector | API Monitor | [Freeware] Allows you to monitor and control API calls made by applications and services. |
Function/API Inspector | SpyStudio | [Freeware] Shows and interprets calls, displaying the results in a structured way. Details registry keys and files that an application uses, COM objects, windows the application has created, errors and exceptions, and more. Tutorials here. |
Function/API Inspector | Spy++ | [Freeware] A powerful tool allowing you to--among other things--spy on messages to/from selected windows in applications. NOTE: Spy++ is included with Visual Studio (including the free version, Community), but can be ran as a standalone tool. Video tutorial here. |
File Inspector | Exeinfo PE | [Freeware] File packer/compressor detector which provides unpacking info and internal exe tools. A spiritual successor to PEiD. |
.NET Deobfuscator/Unpacker | de4dot | [Open Source] A .NET deobfuscator and unpacker written in C#. Most obfuscation from supported implementations can be completely restored (eg. string encryption), but symbol renaming is impossible to restore since the original names aren't (usually) part of the obfuscated assembly. |
Data Type/Structure Reconstructor | ReClassEx | [Open Source] A tool that intellgently reconstructs data types. Based on the original ReClass. |
Data Type/Structure Reconstructor | thisisnl.nl | [Open Source] A .NET port of ReClass, with many additional features. Video tutorials here. |
File Format Parser | QuickBMS | [Open Source] An extensive tool that parses file formats and extracts/reimports files and archives. |
File Format Parser | UABE | [Freeware] An editor for Unity +/4/5// .assets and AssetBundle files. It can create standalone mod installers from changes to .assets and/or bundles. Type information extracted from Unity is used in order to generate text representations of various asset types |
File Format Parser | DevXUnity-Unpacker | [Commercial] An extensive tool which allows full asset extraction and manipulation from Unity games even allowing full exports of detailed scenes from packed files. |
File Format Parser | MultiEx Commander | [Freeware] Allows you to use and create scripts to extract/import files from/to game resource archives. |
PE Inspector | CFF Explorer | [Freeware] Features include dependency walking, disassembly, hex editing, signature scanning/management, special fields description and modification (.NET supported), import adding, extension support, scripting, and more. |
Firmware/File Analyzer | Binwalk | [Open Source] Binwalk is a fast, easy to use tool for analyzing, reverse engineering, and extracting firmware images. Also extremely useful for game analysis (finding/extracting images from resources, etc.). |
Text/Binary Pattern Scanner | YARA | [Open Source] Create descriptions of, and rules based on, textual or binary patterns. Excellent for creating custom rules for tasks like identifying resources in a game, game engine and version being used for a game, etc. See YARA GUI for a Windows GUI front-end. Also, see yarGen for a YARA rule generator. |
Injector | Xenos | [Open Source] A Windows DLL injector, based on the Blackbone library. |
Compiler | Compiler Explorer | [Open Source] Run compilers interactively from your web browser and interact with the assembly! |
Memory Scanner/Tracer | PSR (Pointer Sequence Reverser) | [Open Source] Traces instructions executed prior to reading/writing from/to the provided address of a data member or object, then highlights relevant instructions, identifies vtable pointers, and more. Relevant whitepaper here. |
Memory Scanner/Data Structure Scanner | XenoScan | [Open Source] Lua scriptable memory scanner written in C++. Supports complex scanning, custom structures, and automatic detection of complex structures (linked lists, binary tress, class instances, etc). Expandable with support for emulators. DEFCON Slides here. |