{"id":13584246,"url":"https://github.com/rizinorg/cutter-plugins","last_synced_at":"2026-01-25T09:34:37.828Z","repository":{"id":38012522,"uuid":"177568600","full_name":"rizinorg/cutter-plugins","owner":"rizinorg","description":"A curated list of Community Plugins and Scripts written for Cutter","archived":false,"fork":false,"pushed_at":"2022-10-08T08:04:55.000Z","size":32,"stargazers_count":299,"open_issues_count":9,"forks_count":24,"subscribers_count":16,"default_branch":"master","last_synced_at":"2025-10-09T12:25:28.157Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/rizinorg.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2019-03-25T10:57:12.000Z","updated_at":"2025-10-09T06:41:43.000Z","dependencies_parsed_at":"2023-01-19T13:39:28.221Z","dependency_job_id":null,"html_url":"https://github.com/rizinorg/cutter-plugins","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/rizinorg/cutter-plugins","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rizinorg%2Fcutter-plugins","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rizinorg%2Fcutter-plugins/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rizinorg%2Fcutter-plugins/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rizinorg%2Fcutter-plugins/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/rizinorg","download_url":"https://codeload.github.com/rizinorg/cutter-plugins/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rizinorg%2Fcutter-plugins/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28750875,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-25T09:00:19.176Z","status":"ssl_error","status_checked_at":"2026-01-25T09:00:04.131Z","response_time":113,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-01T15:04:06.967Z","updated_at":"2026-01-25T09:34:37.812Z","avatar_url":"https://github.com/rizinorg.png","language":null,"readme":"# Cutter Plugins\nThis is a curated list of **Plugins** and **Scripts** written for the reverse engineering platform - Cutter.\n\nWant to build your own Plugin for Cutter, or to port an existing one from other disassemblers? It is easy! Follow the tutorial in the official documentation: https://cutter.re/docs/plugins.html\n\n\n## Table of Contents\n- [Cutter Plugins](#cutter-plugins)\n  - [Table of Contents](#table-of-contents)\n  - [Decompilers](#decompilers)\n    - [Ghidra Decompiler](#ghidra-decompiler)\n    - [RetDec Decompiler](#retdec-decompiler)\n    - [jsdec](#jsdec)\n  - [Integrations](#integrations)\n    - [Jupyter Plugin](#jupyter-plugin)\n    - [x64dbgcutter](#x64dbgcutter)\n    - [Yara Plugin](#yara-plugin)\n    - [Hyara](#Hyara)\n    - [AngrCutter](#angrcutter)\n    - [Hobbits Plugin](#hobbits-plugin)\n    - [Capa Explorer](#capa-explorer)\n  - [Malware Analysis](#malware-analysis)\n    - [APT32 Graph Deobfuscator](#apt32-graph-deobfuscator)\n    - [Dropshot / StoneDrill Decrypter](#dropshot--stonedrill-decrypter)\n    - [Deobfuscate Bitpaymer API Calls](#deobfuscate-bitpaymer-api-calls)\n  - [Coverage](#coverage)\n    - [CutterDRcov](#cutterdrcov)\n    - [Cutter Lighthouse](#cutter-lighthouse)\n  - [Enhancements](#enhancements)\n    - [CutterRef](#cutterref)\n    - [Assembly-reference](#assembly-reference)\n    - [Recovering Stack Strings](#recovering-stack-strings)\n  - [Graphs](#graphs)\n    - [Cutter Deep Graphs](#cutter-deep-graphs)\n  - [Misc](#misc)\n    - [Cutter plugin templates](#cutter-plugin-templates)\n---\n\n## Decompilers\n\n### [Ghidra Decompiler](https://github.com/rizinorg/rz-ghidra)\nThis is an integration of the Ghidra decompiler for Cutter and rizin. It is solely based on the decompiler part of Ghidra, which is written entirely in C++, so neither Ghidra itself nor JAVA are required at all and the plugin can be built self-contained.\n\nDue to its quality, the ghidra decompiler plugin is shipped by default in Cutter releases.\n\n**Type**: Plugin  \n**Status**: Maintained  \n\n### [RetDec Decompiler](https://github.com/rizinorg/rz-retdec)\nThe plugin integrates RetDec decompiler into Cutter.\n\nWith the bundled version of RetDec you can decompile the following architectures:\n\n   - 32-bit: Intel x86, ARM, MIPS, PIC32, and PowerPC.\n   - 64-bit: x86-64, ARM64 (AArch64).\n  \n**Type**: Plugin  \n**Status**: Maintained  \n\n\n### [jsdec](https://github.com/rizinorg/jsdec)\nJSdec converts the assembly of a function to a Pseudo-C code. Cutter integrates jsdec by default. \n\n**Type**: Plugin  \n**Status**: Maintained  \n**Talk**: [How not to write a decompiler - r2con 2018](https://www.youtube.com/watch?v=2siU7B0PjPI)\n\n## Integrations\n### [Jupyter Plugin](https://github.com/rizinorg/cutter-jupyter)\n\nThis plugin integrates the Jupyter notebook inside Cutter\n\n**Status**: Maintained  \n\n### [x64dbgcutter](https://github.com/yossizap/x64dbgcutter)\n\nAllows the import and export of x64dbg comments and breakpoints in Cutter\n\n**Status**: Maintained\n\n### [Yara Plugin](https://github.com/JannisKirschner/Cutter-Yara-Plugin)\n\nA Cutter plugin to match project with Yara rules at runtime. \n\n**Status**: Maintained\n\n### [Hyara](https://github.com/hyuunnn/Hyara)\n\nHyara is a plugin that makes it convenient to write and test Yara rules from inside Cutter.\n\n**Type**: Plugin  \n**Status**: WIP\n\n### [AngrCutter](https://github.com/yossizap/angrcutter)\n\nA plugin that adds dynamic symbolic execution to Cutter's debugger using Angr.\n\n**Status**: Maintained\n\n### [Hobbits Plugin](https://github.com/Mahlet-Inc/hobbits-cutter-plugin)\n\nA plugin that adds [Hobbits](https://github.com/Mahlet-Inc/hobbits) displays to Cutter.\n\n**Status**: WIP\n\n### [Capa Explorer](https://github.com/ninewayhandshake/capa-explorer)\nCapa is a framework that uses a well-defined collection of rules to identify capabilities in a program. You can run the plugin against a PE file or shellcode and it tells you what it thinks the program can do.\n\n**Type**: Plugin  \n**Status**: Maintained\n\n\n## Malware Analysis\n\n\n### [APT32 Graph Deobfuscator](https://github.com/CheckPointSW/Cyber-Research/blob/master/Malware/APT32/APT32GraphDeobfuscator.py)\nA plugin for Cutter and Radare2 to deobfuscate APT32 flow graphs\nThis is a python plugin for Cutter that is compatible as an r2pipe script for\nradare2 as well. The plugin will help reverse engineers to deobfuscate and remove\njunk blocks from APT32 (Ocean Lotus) samples.\n\n**Type**: Plugin  \n**Status**: Maintained  \n**Article**: [APT32 Flow Graphs with Cutter and Radare2](https://research.checkpoint.com/deobfuscating-apt32-flow-graphs-with-cutter-and-radare2/)\n\n\n### [Dropshot / StoneDrill Decrypter](https://github.com/ITAYC0HEN/A-journey-into-Radare2/blob/master/Part%203%20-%20Malware%20analysis/decrypt_dropshot.py)\nThis is an r2pipe based script that is used to decrypt strings and resources in the Dropshot APT malware.\n\n**Type**: Script  \n**Status**: Maintained  \n**Articles**: \n - [Decrypting APT33’s Dropshot Malware with Radare2 and Cutter – Part 1](https://www.megabeets.net/decrypting-dropshot-with-radare2-and-cutter-part-1)\n - [Decrypting APT33’s Dropshot Malware with Radare2 and Cutter – Part 2](https://www.megabeets.net/decrypting-dropshot-with-radare2-and-cutter-part-2)\n\n\n### [Deobfuscate Bitpaymer API Calls](https://github.com/mauronz/malware_analysis/blob/master/deobf_bitpaymer_cutter.py)\nDeobfuscation script of API calls in Bitpaymer (v2)\n\n**Type**: Script  \n**Reference**: https://twitter.com/FraMauronz/status/1005138478261309440\n\n## Coverage\n\n### [CutterDRcov](https://github.com/oddcoder/CutterDRcov)\nCutterDrcov is code coverage plugin that visualizes DynamoRIO drcov into Cutter static analysis.\n\n**Type**: Plugin  \n**Status**: Maintained  \n\n### [Cutter Lighthouse](https://github.com/gaasedelen/lighthouse)\n\nThis is still a work in progress on this [Pull Request](https://github.com/gaasedelen/lighthouse/pull/65).\n\n**Type**: Plugin  \n**Status**: WIP  \n\n\n## Enhancements\n\n### [CutterRef](https://github.com/yossizap/cutterref)\n\nCutter Full Instruction Reference Plugin. The plugin will monitor the location for your cursor and display the full documentation of the instruction. At the moment it only supports x86-64, ARM and MIPS 32bit, however adding support for other architectures is relatively easy.\n\n**Type**: Plugin  \n**Status**: Maintained\n\n### [Assembly-reference](https://github.com/daringjoker/Assembly-refrence)\n\nA plugin for Cutter that shows the information about the assembly instruction currently selected (only for x86 and x64)\n\n**Type**: Plugin  \n**Status**: Maintained\n\n### [Recovering Stack Strings](https://github.com/securitykitten/cutter_scripts/blob/master/scripts/cutter_stackstrings.py)\n\nCutter script to comment value of strings that were manually created on the stack.\n\n**Type**: Script  \n**Status**: Maintained\n\n\n## Graphs\n\n### [Cutter Deep Graphs](https://github.com/JavierYuste/radare2-deep-graph)\nA Cutter plugin to generate radare2 graphs. It also provides a new graph called Deep callgraph, which builds an in-depth callgraph from the current function, adding recursively its callees' callings.\n\n**Type**: Plugin  \n**Status**: Maintained\n\n\n## Misc\n### [Cutter plugin templates](https://github.com/rizinorg/cutter/tree/master/src/plugins)\nPython and C++ sample plugins to start with.\n\n**Type**: Plugin  \n**Status**: Maintained\n","funding_links":[],"categories":["Others","Others (1002)"],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frizinorg%2Fcutter-plugins","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Frizinorg%2Fcutter-plugins","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frizinorg%2Fcutter-plugins/lists"}