This is a collection of tools you may like if you are interested on reverse engineering and/or malware analysis on x86 and x64 Windows systems. After installing this program, you'll have to ways to access the tools:
- Double-click the
retoolkiticon in the Desktop. - Right-click on a file, choose
Send to -> retoolkit. This way the selected file is passed as argument to the desired program.
You don't. Obviously, you can download such tools from their own website and install them by yourself in a new VM. But if you download retoolkit, it can probably save you some time. Additionally, the tools come pre-configured so you'll find things like x64dbg with a few plugins, command-line tools working from any directory, etc. You may like it if you're setting up a new analysis VM.
The *.iss files you see here are the source code for our setup program built with Inno Setup. To download the real thing, you have to go to the Releases section and download the setup program.
Have a look at the wiki for a detailed list.
I don't know. Some included tools are not open source and come from shady places. You should use it exclusively in virtual machines and under your own responsibility.
It depends. The idea is to keep it simple. We won't add a tool just because it's not here yet. But if you think there's a good reason to do so, and the license allows us to redistribuite the software, please open an issue here if it doesn't exit yet.
- Better organization based on target file type.
- Removed Start Menu shortcuts.
- New context menu (right-click on a file -> Send to -> retoolkit).
- fasm now opens .asm files if you double-click on them.
- Tools added: JADX, Cutter and PE-sieve.
- Tools upaded to the latest version.
- Updated Error Lookup tool to a different one, with more features.
- A few tools have their path added to user's PATH environment variable.
- New icon. Thanks to @pauloarruzzo.
- First public release.