AgentIndex icon
AgentIndex
reconbridge logo
reconbridge
★ 29
vs
tcpk logo
tcpk
★ 23

reconbridge vs tcpk

reconbridge: ReconBridge is a versatile reverse engineering backend for Android (KernelSU rooted) devices, performing atomic operations like package pulling and hooking. It integrates with PC-side AI agents (e.g., Claude Code, ChatGPT Codex) for intelligent analysis, function localization, and result interpretation.; tcpk: TCPK is a portable Windows thick-client and MSIX security audit tool designed to find, verify, and report vulnerabilities in desktop applications. It offers static and dynamic analysis, a PowerShell engine, a WinForms GUI, and an optional agentic AI workbench for local triage.

01

TL;DR

reconbridge logo
reconbridgeWorkflow Automation · ★ 29

Authorized security research

Read reconbridge full review →
tcpk logo
tcpkSecurity & Safety · ★ 23

Security auditing of Windows desktop applications: For identifying vulnerabilities in thick clients, MSIX packages, .NET, Electron, and native executables.

Read tcpk full review →
02

Side-by-Side Comparison

Field
reconbridge logoreconbridge
tcpk logotcpk
Category
Workflow Automation
Security & Safety
Stars
★ 29
★ 23
License
MIT
MIT
Install Command
irm https://github.com/lm060719/reconbridge/releases/latest/download/install.ps1 | iex
git clone https://github.com/V33RU/tcpk.git && cd tcpk && .\TCPK.bat
Updated
1w ago
2d ago
Open Source
Yes
Yes
Website
↗ Visit
↗ Visit
GitHub
↗ GitHub
↗ GitHub
Tags
Android Reverse Engineering, Dynamic Analysis, Static Analysis
Thick Client Pentesting, MSIX Security, PowerShell
03

Features

reconbridge logoreconbridge
01Provides a versatile reverse engineering backend on Android KernelSU devices.
02Integrates with PC-side AI agents for intelligent analysis and results interpretation.
03Supports dynamic hooking, Java tracing, and real-time tampering via Zygisk and LSPosed modules.
04Includes features for memory DEX dumping and anti-detection hook configurations.
tcpk logotcpk
01Evidence-based verification: Proves high-value findings with IL decompilation and taint checking, moving beyond simple regex hits.
02Real CVSS v4.0 scoring: Scores each finding with a faithful port of the FIRST.org algorithm, providing accurate context-specific CVSS scores.
03Supply-chain CVE detection: Matches shipped components against live OSV and NVD-by-CPE, embedding version-accurate vulnerabilities in a CycloneDX SBOM.
04Local-first AI triage (optional): Pipes findings through a local Ollama model for AI review, keeping decompiled IL within the local environment by default.
05Engagement-ready reports: Generates comprehensive reports in HTML, multi-sheet Excel, JSON, SARIF, CycloneDX SBOM, and `intel.html` dashboard formats.
04

Use Cases

reconbridge logoreconbridge
↳Authorized security research
↳CTF (Capture The Flag) competitions
↳Reverse engineering learning and education
↳Defensive research and analysis
tcpk logotcpk
↳Security auditing of Windows desktop applications: For identifying vulnerabilities in thick clients, MSIX packages, .NET, Electron, and native executables.
↳Compliance and vulnerability management: Generating comprehensive reports with CVSS v4.0 scores, CWE, MITRE ATT&CK, OWASP TASVS mappings, and SBOMs for regulatory compliance.
↳Threat intelligence gathering: Utilizing the `intel.html` dashboard and detailed findings to understand application security posture.
↳Automated static and dynamic analysis in pentesting workflows: Quickly performing initial assessments of thick client applications.
FAQ

FAQ

What is the difference between reconbridge and tcpk?
Both reconbridge and tcpk are in the Workflow Automation category. reconbridge has 29 stars, while tcpk has 23 stars.
Which is better, reconbridge or tcpk?
The best choice depends on your use case. Choose reconbridge if Authorized security research, and tcpk if Security auditing of Windows desktop applications: For identifying vulnerabilities in thick clients, MSIX packages, .NET, Electron, and native executables..
Is reconbridge free or open source?
Yes, reconbridge is open source on GitHub (MIT).
Is tcpk free or open source?
Yes, tcpk is open source on GitHub (MIT).
Cloud Infrastructure
Ad

Deploy on DigitalOcean

Host your MCP servers, Docker containers, and AI agents with $200 free credit over 60 days.

Claim $200 Free Credit
→

Related

Alternatives to reconbridge →Alternatives to tcpk →reconbridge details →tcpk details →