protocol-analysis

Awesome Reverse Engineering Anything: tools, projects, case studies and research papers for websites, games, apps, binaries, firmware and communication protocols.

运动世界校园纯 Python 协议实现，包含 NetSecKit 4.2.4、GeeTest v4、全链路协议分析与自动化套件，脱离 Android App 与 Native SO 依赖。

MAPS cloud scanner and response parser for Microsoft Defender research.

ICMPWatch: ICMP Packet Sniffer

Analysis and basic wrapper library for the Lego Dimensions "Gateway" peripheral

Wiredigg is a comprehensive network analysis tool with advanced security features designed for network administrators, security professionals, and IT enthusiasts. It provides real-time packet capture, protocol analysis, anomaly detection, and threat identification capabilities in a modern, user-friendly interface.

Reverse-engineered protocol and open-source Python driver for the Ocrustar / ElkSmart USB IR blaster (VID 045C / PID 02AA). Learn and transmit IR signals without the app. Includes full APK decompilation, Huffman encoding analysis, Kookong cloud API documentation, and BLE protocol.

Does This Look Like An Honeypot? (DTLLAH) Multi-protocol CLI that fingerprints whether a target IP behaves like an honeypot — using Honeyscore, active auth/state probes, and a weighted score.

Full reverse engineering of the UBox/UBIA smart-camera P4P protocol: custom block cipher, KCP+RDT video, ICE-style NAT traversal, and a standalone Python client. TUTK IOTC rebadge, documented end-to-end.

Modbus Attack Tool for Remote Industrial eXploitation (M.A.T.R.I.X) is a comprehensive security testing tool for Modbus TCP protocol implementations.

玄镜 Web/JS 逆向 Skill｜证据驱动的接口、签名、Cookie、JSVMP、WASM、GraphQL、WebSocket 与无浏览器协议复现。Evidence-driven Web/JS reverse engineering for authorized targets.

open-source AI-assisted USB protocol analysis tool and MCP server

SmartFoxServer 2X binary protocol implementation for Python

Reproducibility code for “Evaluating the Performance of Large Language Models in Taxonomic Classification of Questions in Verbal Protocols of Design” (Published on AI EDAM).

Reverse engineering the Xiaomi Mi weight scale: BLE advertisement protocol, byte-level frame layouts, an offline decoder and each computed metric traced to its source.

Tools and a technical reference for P2 ("Protocol II"), the Siemens APOGEE building-automation protocol over TCP: a Wireshark dissector, a read-only scanner, a virtual PXC panel to develop against, and a P2→BACnet/IP bridge — for owner-operators working with their own legacy equipment.

An advanced, security-focused network traffic analysis tool designed for system administrators, cybersecurity professionals, and network engineers. The xsukax PCAP Analyzer provides comprehensive insights into network behavior while maintaining strong privacy protections and offering advanced threat detection capabilities.

Reverse engineering of the L&S Emotion Control 2.4 GHz lighting protocol from a KZQ-8YKC-K remote (PIC16F1503 + TI CC2500). Full RF and packet spec recovered by SPI bus sniffing, verified over the air with a HackRF

Deterministic binary analysis, runtime instrumentation & protocol reverse-engineering skill for AI coding agents.

Profile aMule's External Connect (EC) protocol - a pass-through proxy with a live dashboard, per-caller attribution and session reports.