The short answer. Cutter is the graphical reverse-engineering environment, and ImHex and Hex Fiend are the hex editors — ImHex for the pattern-matching and structure work, Hex Fiend for speed and simplicity. MacSymbolicator and SYM turn a crash report into something readable, which is the most common real need in this category and the one people discover last. Suspicious Package inspects an installer, and Nib Unlocker converts a compiled interface file back to an editable one. The dividing question is whether the artefact is a binary, a crash log, an installer or an interface file, because “reverse engineering” covers four workflows that share almost no tools.
This guide covers 7 reverse engineering tools for macOS. Every fact below is drawn from the same verified records that back each app’s own page. The recommendations are our editorial judgment, not payment. Last verified 2026-10-16.
Quick comparison
| App | What it is | Pricing | Licence | Version |
|---|---|---|---|---|
| Cutter | reverse engineering tool | Open source | not published | 2.5.0 |
| Hex Fiend | hex editor | Open source | BSD-2-Clause | 2.18.1 |
| ImHex | developer tool | Free | not published | — |
| MacSymbolicator | developer tool | Open source | GPL-2.0 | 2.6 |
| Nib Unlocker | developer tool | not published | not published | — |
| Suspicious Package | security tool | Free | not published | 4.8 |
| SYM | developer tool | Open source | MIT | 0.8.8 |
What actually decides this
- Which artefact you have. A Mach-O binary, a crash report, a package and a nib are four formats with four toolchains. Choosing by the label “reverse engineering” rather than by the file in front of you is how people end up with a disassembler and a crash log.
- Whether you need to read or to change. A hex editor that can write is a different risk from one that only reads. If the goal is inspection, a read-only path is safer and usually sufficient.
- Whether a symbol table exists. A stripped binary is a wall of addresses. A crash report with symbols is a stack trace. The difference between a productive hour and a wasted one is usually whether the symbols are available, not which tool is open.
- What the pattern support is. A hex editor that understands file structures can annotate a header field by field. One that does not is a grid of bytes. For anything with a documented format, the pattern language is the feature that matters.
- Whether the output is meant for a person or a tool. A readable stack trace, a structured dump and a converted project file serve three audiences. Tools that produce the first are diagnostic; tools that produce the third are conversion utilities with a reverse-engineering label.
Our picks
- Cutter — Its record describes a powerful multi-platform reverse engineering tool, which is the disassembly case. Choose it when you need to disassemble and explore a binary.
- ImHex — Its record describes a hex editor for reverse engineers and programmers, which is the structure-aware case. Choose it when you need a hex editor that understands file structures.
- Hex Fiend — Its record describes a fast and clever open-source hex editor, which is the minimal case. Choose it when you want a fast, simple hex editor.
- MacSymbolicator — Its record describes symbolicating macOS and iOS crash reports, which is the crash-log case. Choose it when you have a macOS or iOS crash report to read.
- Suspicious Package — Its record describes inspecting macOS installer packages, which is the package case. Choose it when the artefact is an installer.
- Nib Unlocker — Its record describes converting a nib to a xib, which is the interface-file case. Choose it when the artefact is a compiled interface file.
The apps
Cutter
Cutter is a reverse engineering tool for macOS. Powerful multi-platform reverse engineering tool. It is open source.
What it does. Free and Open Source RE Platform powered by Rizin.
Cutter is listed with current version 2.5.0.
Full profile and verified facts for Cutter →
Hex Fiend
Hex Fiend is a hex editor for macOS. Fast and clever open source hex editor. It is released under BSD-2-Clause.
Strengths. Does not keep files in memory, so it opens a file as large as you can create; the project reports testing on a 118 GB file. Supports insertions and deletions rather than only in-place changes, which it notes some hex editors limit you to. Writing back overwrites only the byte ranges that changed, and the project states it never needs temporary disk space.
Trade-offs. It is a byte-level tool: reading a file’s structure means writing a binary template or interpreting raw offsets, and the data inspector only helps if you know how to read endianness. Because it writes only the changed ranges back, there is no backup copy — the file you open is the file you edit. The release tracked here is 2.18.1, dated 2025-03-16, so the feature set has not moved since.
Not for. Anyone who wants to read or edit prose — a text editor is the right tool for that. Users who want a guided, point-and-click interface rather than byte offsets.
What it does. Insert, delete, rearrange. Hex Fiend does not limit you to in-place changes like some hex editors. Work with huge files. Hex Fiend can handle as big a file as you’re able to create. It’s been tested on files as large as 118 GB. Small footprint. Hex Fiend does not keep your files in memory. You won’t dread launching or working with Hex Fiend even on low-RAM machines. Fast. Open a huge file, scroll around, copy and paste, all instantly. Find what you’re looking for with fast searching.
Hex Fiend is listed with current version 2.18.1.
Full profile and verified facts for Hex Fiend →
ImHex
ImHex is a developer tool for macOS. Hex Editor for reverse engineers and programmers. It is free.
What it does. ImHex is a free, open-source hex editor for reverse engineers and developers, featuring Pattern Language, data analysis, visualization and disassembly.
Full profile and verified facts for ImHex →
MacSymbolicator
MacSymbolicator is a developer tool for macOS. Symbolicating macOS/iOS crash reports, easily. It is released under GPL-2.0.
What it does. Symbolicating macOS/iOS crash reports, easily.
MacSymbolicator is listed with current version 2.6.
Full profile and verified facts for MacSymbolicator →
Nib Unlocker
Nib Unlocker is a developer tool for macOS. .nib to.xib converter. Its pricing is not published.
Full profile and verified facts for Nib Unlocker →
Suspicious Package
Suspicious Package is a security tool for macOS. An application for inspecting macOS installer packages. It is free.
Suspicious Package is listed with current version 4.8.
Full profile and verified facts for Suspicious Package →
SYM
SYM is a developer tool for macOS. GUI Application to symbolicate iOS crash log. It is released under MIT.
SYM is listed with current version 0.8.8.
Full profile and verified facts for SYM →
How to choose
- Free of charge. ImHex and Suspicious Package — no payment is required.
- No licence fee, source available. Cutter, Hex Fiend, MacSymbolicator and SYM — the source can be read and, under the terms of each licence, reused.
- Pricing not published in our data. Nib Unlocker — check the developer’s own site before assuming anything about cost.
Open source: Cutter, Hex Fiend, MacSymbolicator and SYM (4 of 7).
Common mistakes
- Opening a crash report in a disassembler. It is text, and the tool that reads it is the one that resolves symbols.
- Editing a binary with a hex editor to “see what happens” without a copy.
- Assuming a stripped binary can be understood by switching tools. The missing information is missing.
- Treating a converted interface file as the original source. The conversion is lossy in ways that are not announced.
How this guide was put together
Each app’s facts come from its own record: the developer’s own pages and repository, the App Store listing where one exists, and the documentation, each with a source grade and an access date. Where a fact rests on the developer’s own statement rather than on something we verified independently, the sentence says so. Where our data has no value for something, the guide says “not published” instead of guessing.
A price appears here only where the record carries one from a stated source; the guide never estimates one, and it records the pricing model alongside so the two can be read together. Prices change and vary by region, so each app links to its own page for the current detail.
The facts and the recommendations are kept apart on purpose. Everything in the app entries, the comparison table and the answers above is composed from the records. The short answer, the criteria and the picks are our editorial judgment: they reflect what we would choose and why, and they are not paid for. Where we make a recommendation we name the condition it applies under, because we do not call anything “the best” without explaining the criteria.
Verified 2026-10-16.
Frequently Asked Questions
How do I choose between these reverse engineering tools?
There is no single answer — it depends on what you need. This guide covers 7 reverse engineering tools: Cutter, Hex Fiend, ImHex, MacSymbolicator, Nib Unlocker, Suspicious Package and SYM. They differ mainly in pricing model, licence and the trade-offs each one carries. Pick by the trade-off you care about rather than by rank.
Are these reverse engineering tools free?
Pricing across this group: open source (Cutter, Hex Fiend, MacSymbolicator and SYM), free (ImHex and Suspicious Package) and not published (Nib Unlocker). Where we list pricing as not published, the developer does not state a model we could verify — check their own site before assuming anything about cost. We quote a price only where the record carries one from a stated source, and we never estimate one. Prices change and vary by region and by store, so always check the developer’s own page for the current figure.
Which of these reverse engineering tools are open source?
Cutter (not published), Hex Fiend (BSD-2-Clause), MacSymbolicator (GPL-2.0) and SYM (MIT) are open source.
Do these reverse engineering tools support Apple Silicon?
Our data does not carry an explicit Apple Silicon statement for any app in this group, so we do not claim one. The absence of a statement is not the same as the absence of support.
How do I choose between them?
Start with how you pay: the guide groups these apps by pricing model, because the budget is the constraint most people actually have. Then check the trade-offs listed for each app: the limitations are the part that decides most people’s choice, because they describe what the app will not do for you.
Who should not use these apps?
Hex Fiend each list an audience they are explicitly not aimed at. Those notes come from the same verified records as the rest of this guide, and they are worth reading before you install anything.
When was this data last verified?
The facts in this guide were last confirmed on 2026-10-16. Every app page carries its own verification dates and source list, so you can check any individual claim.
