Reverse Engineer's Toolkit (retoolkit)

Reverse Engineer's Toolkit (retoolkit) 2023.05

A collection of tools for those interested in reverse engineering and/or malware analysis on Windows systems.

  • By Mente Binária
  • Open Source
  • Updated May 31, 2023
Download for Windows

About Reverse Engineer's Toolkit (retoolkit)

This is a collection of tools you may like if you are interested on reverse engineering and/or malware analysis on x86 and x64 Windows systems.

What's new in 2023.05

  • Added:
  • 4n4lDetector
  • de4dot GUI
  • dll_to_exe [#68]
  • DotDumper
  • dumpulator Python library [#72]
  • FakeNet-NG [#62]
  • gftrace [#70]
  • GoReSym [#67]
  • mal_unpack [#66]
  • Nmap (plus Zenmap, Ndiff, Ncat, and Nping) [#65]
  • Observer
  • pe_unmapper [#80]
  • PEAnatomist
  • Regshot
  • requests Python library
  • Stud_PE
  • WinObjEx64 [#74]
  • x64dbg scripts for SecuROM and SafeDisc
  • XNTSV [#71]
  • XOpcodeCalc [#73]
  • Changes:
  • Added syskb*.bin KB files to IDR folder [#78]
  • Changed Ctrl+R shortcut to Ctrl+
  • Cutter moved to Decompilers category
  • de4dot added to PATH
  • howllows_hunter added to PATH
  • lessmsi added to PATH
  • New Calculators category
  • New Go category
  • ProcessHacker became System Informer
  • Python added to PATH [#75]

Full release notes »

Technical details

PublisherMente Binária
Version2023.05
Release date2023-05-31
LicenseApache-2.0
Installer typeinno
Architecturex64
Package IDmentebinaria.retoolkit
Install scopeAll users

Install Reverse Engineer's Toolkit (retoolkit) from the command line

Install with Windows Package Manager
winget install --id=mentebinaria.retoolkit -e
Update to the latest version
winget upgrade --id=mentebinaria.retoolkit -e
Uninstall
winget uninstall --id=mentebinaria.retoolkit -e
Silent install with the offline installer
"retoolkit_2023.05_setup.exe" /VERYSILENT /NORESTART /COMPONENTS="*android,*autoit,*calculators,*cobaltstrike,*debuggers,*decompilers,*delphi,*dotnet,*elf,*go,*hexeditors,*java,*ole,*network,*pdf,*pe,*peresourceeditors,*processinspection,*programming,*signature,*systeminformation,*unpacking,*utilities,!network\nmap"

Reverse Engineer's Toolkit (retoolkit) adds these commands to the command line: bazzar, capa, CobaltStrikeScan, d2j-dex2jar, de4dot, DisView, floss, hollows_hunter, manw, OfficeMalScanner, pe-sieve, redress, RTFScan, upx, vt, winapiexec.

debugdebuggerdecompiledecompilerdevelopdevelopmentdisassembledisassemblerreverse-engineering

Reverse Engineer's Toolkit (retoolkit) version history

2022.10 Oct 27, 2022
  • Added tools:
  • AutoIt-Ripper.
  • Bazzar [#51].
  • ExtremeDumper [#56].
  • HxD.
  • HyperDbg [#53].
  • OpenHashTab.
  • WinAPI Search.
  • xSelectBlock x64dbg plugin, previously removed by mistake.
  • Removed tools:
  • MiniDump x64dbg plugin [#58].
  • Imrovements:
  • CTRL+R now opens retoolkit context menu.
  • Added a CHECKSUMS.txt file with the SHA-1 hashes from all files installed [#44].
  • New Documentation menu with useful reading for reversers.
  • The setup program can create a shortcut to cmd.exe on Desktop.
  • Users can now choose which x64dbg plugins they want to install.
2022.04 Apr 30, 2022
  • Added:
  • Echo Mirage.
  • elfparser-ng.
  • entropy (closes #47).
  • Force Toolkit.
  • MiniDump x64dbg plugin.
  • Notepad++.
  • OllyDumpEx x64dbg plugin (closes #41).
  • Removed:
  • Bewareircd: Too specific to analyze (now rare?) IRC-based communications.
  • dnSpy: Replaced by dnSpyEx.
  • HyperDBG: It's a nice project, but they don't provide binary releases yet, meaning a lot of work for me.
  • JRE: Replaced by JDK, which is required by Ghidra.
  • Threadtear: It doesn't work with JDK required by Ghidra.
2021.10 Oct 1, 2021
  • Yeah, new version numbering scheme borrowed from Ubuntu releases. :)
  • Reorganized MSI analysis tools under OLE tools section.
  • Updated current tools.
  • Fixed pev PATH.
  • Fixed license SendTo+ license issue (closes #34).
  • Lots of new functions added to SlothBP x64dbg plugin configuration.
  • New DIE signatures added.
  • Tools added:
  • Dev-C++ compiler.
  • Java 8 Runtime Environment, needed by Java tools.
  • Python 3 (via WinPython), mainly to support Python-based tools.
  • XLMMacroDeobfuscator.
  • dnSpyEx (new, maintained dnSpy fork).
  • oledump.
  • oletools (closes #33).
  • pdfid.py.
  • pdf-parser.py
  • MapoAnalyzer x64dbg plugin.
  • xSelectBlock x64dbg plugin.
  • redress.
  • hollows_hunter.
  • HyperDbg.
  • Threadtear.
  • 1768.py.
  • CobaltStrikeScan.
  • dex2jar.

Frequently asked questions

Is Reverse Engineer's Toolkit (retoolkit) free?

Yes. Reverse Engineer's Toolkit (retoolkit) is free and open-source software released under the Apache-2.0 license.

What is the latest version of Reverse Engineer's Toolkit (retoolkit)?

The latest version is 2023.05, released on May 31, 2023.

Is it safe to download Reverse Engineer's Toolkit (retoolkit)?

The download button links to the official installer published on github.com, the same file Windows Package Manager installs. You can verify the downloaded file by comparing its SHA-256 checksum with 1eb3511e8b816641d3ee6686bfc61329b54532bfd5cd8a65aa20f154ee55d120.

Which Windows versions does Reverse Engineer's Toolkit (retoolkit) support?

Reverse Engineer's Toolkit (retoolkit) runs on Windows and is available for 64-bit (x64) systems.

How do I install Reverse Engineer's Toolkit (retoolkit) silently?

Run the offline installer with "retoolkit_2023.05_setup.exe" /VERYSILENT /NORESTART /COMPONENTS="*android,*autoit,*calculators,*cobaltstrike,*debuggers,*decompilers,*delphi,*dotnet,*elf,*go,*hexeditors,*java,*ole,*network,*pdf,*pe,*peresourceeditors,*processinspection,*programming,*signature,*systeminformation,*unpacking,*utilities,!network\nmap", or install it with Windows Package Manager: winget install --id=mentebinaria.retoolkit -e --silent.

How do I uninstall Reverse Engineer's Toolkit (retoolkit)?

Open Settings › Apps › Installed apps, find Reverse Engineer's Toolkit (retoolkit) and select Uninstall. From the command line, run winget uninstall --id=mentebinaria.retoolkit -e.

Alternatives to Reverse Engineer's Toolkit (retoolkit)

Other Development kits programs for Windows from different developers.

Inspect

Inspect 3.3.3

Inspect helps you debug the mobile web on iOS and Android by giving you an all-in-one developer tool for macOS, Windows, and Linux.

Development kits · Proprietary · Oct 12, 2026

Download