# Tools

> Every listed resource, editors’ picks first. The filters below can be combined.

- Search: append `?q=<keywords>` to the URL. Separate several keywords with spaces; all of them must match. Matches name, repository, tags, professions, description and README.
- Filter by type: append `?type=<cli|skill|plugin|mcp>` to the URL.
- Filter by profession: append `?profession=<profession id>` to the URL. Separate several ids with commas; a resource matches when it suits any of them. Ids are listed at https://hebbmind.com/api/v1/professions
- Filter by tag: append `?tag=<tag>` to the URL. Separate several tags with commas; a resource must carry all of them. Tags are listed at https://hebbmind.com/api/v1/tags

Resources for Mobile & desktop or Security, Tagged `python`: 9 items.

> - Mobile & desktop: Building and shipping iOS, Android and desktop apps.
> - Security: Code audits, vulnerability triage, penetration testing and compliance.

- [IDA Pro MCP](https://hebbmind.com/mcp/ida-pro-mcp.md): [MCP] Lets agents decompile, disassemble and query cross-references in IDA Pro, and rename variables, change types and add comments, including headless idalib mode. Requires IDA Pro 8.3+ (IDA Free is not supported); the author now recommends Hex-Rays' official IDA MCP instead.
- [HexStrike AI](https://hebbmind.com/mcp/hexstrike-ai.md): [MCP] Wraps 150+ security tools such as nmap, sqlmap and nuclei for agents to orchestrate, covering network recon, web pentesting, binary analysis and CTFs. Clone the repo, install the tools yourself and start the local server. For authorized testing only.
- [Claude Skills (Fullstack Dev Skills)](https://hebbmind.com/plugin/jeffallan-claude-skills.md): [Plugin] Bundles 60+ full-stack specialist skills into one plugin: experts for 12 languages including Python, TypeScript, Go, Rust and Java, and frameworks like React, Django and Spring Boot, activated automatically by request. Also includes Jira and Confluence workflow commands (needs Atlassian MCP).
- [Presidio CLI](https://hebbmind.com/cli/presidio.md): [CLI] Scans files and directories for personal data such as names, emails and credit card numbers using Presidio Analyzer, with configurable entity types, confidence thresholds and ignore rules. Needs Python 3.10+ and a spaCy language model.
- [Airtest](https://hebbmind.com/cli/airtest.md): [CLI] NetEase's open-source cross-platform UI automation framework: locates elements by image recognition to automate games and apps on Android, iOS and Windows without touching their code. airtest run executes cases and airtest report builds HTML reports.
- [Ghidra MCP Server](https://hebbmind.com/mcp/ghidra-mcp.md): [MCP] 250+ MCP tools for Ghidra: decompilation, cross-references, data-flow analysis, bulk renaming and commenting, P-code emulation and live debugging, with headless mode support. Requires Java 21 and Ghidra 12.1, and the plugin must be built and deployed first.
- [ScanCode Toolkit](https://hebbmind.com/cli/scancode-toolkit.md): [CLI] Scans codebases and dependencies for open-source licenses, copyright notices and package manifests, detecting licenses by full-text matching, with output in JSON, SPDX, CycloneDX and more, for open-source compliance reviews.
- [MCP Server for WinDbg](https://hebbmind.com/mcp/mcp-windbg.md): [MCP] Lets agents drive WinDbg's CDB/KD to analyze crash dumps, debug user-mode processes remotely and debug kernels, and triage many dumps in a batch. Windows only; requires WinDbg or Debugging Tools for Windows.
- [Claude Code LSPs](https://hebbmind.com/plugin/claude-code-lsps.md): [Plugin] Third-party LSP plugin marketplace with 30+ language server plugins, including TypeScript, Python, Rust, Go, Java, C/C++, Vue, Svelte, Elixir and Haskell, covering more languages than the official set. Requires Claude Code 2.1.50+; install the language servers yourself.