Awesome GitHub RepositoriesUser-Mode Emulation

Ish is a Linux shell emulator for iOS that provides a local terminal environment for running shell commands and managing files. It functions as an instruction-level emulator that enables the execution of Linux binaries on mobile devices by simulating an Alpine Linux environment. The project distinguishes itself by combining user-mode Linux emulation with a virtual root filesystem. This allows the software to map Linux kernel system calls to host functions and execute scripts and toolsets directly on an iPhone or iPad. The emulator also provides low-level program debugging capabilities, inclu

Buildkit is a programmable container build toolkit and OCI container image builder that converts build definitions into concurrent dependency graphs for image construction. It functions as an OCI image distribution engine, capable of generating container images and exporting artifacts to local storage or remote registries. The project is distinguished by its use of a low-level binary intermediate representation to decouple high-level build languages from the execution engine. It supports multi-platform image builds through user-mode architecture emulation and provides a distributed build cach

pwndbg is a GDB plugin and binary analysis framework designed for reverse engineering, exploit development, and low-level program analysis. It extends the core functionality of the debugger to provide advanced memory inspection and automation tools. The project distinguishes itself with specialized capabilities for heap analysis across glibc, jemalloc, and musl, as well as a comprehensive kernel debugging toolkit for inspecting Linux kernel tasks and slab allocators. It includes an integrated ROP gadget searcher for constructing exploit chains and an LLM-powered debugging assistant that provi

Box64 هو وقت تشغيل عبر البنيات وطبقة محاكاة لوضع المستخدم تسمح بتشغيل برامج Linux وWindows على أجهزة غير أصلية. يعمل كمحاكي لتعليمات x86-64 ومترجم ثنائي، حيث ينفذ الملفات الثنائية 64-بت على بنيات CPU مختلفة عن طريق ترجمة كود الآلة إلى تعليمات أصلية. يستخدم المشروع إعادة التجميع الديناميكي لتسريع التنفيذ ويقوم بتعيين استدعاءات نظام الضيف إلى مكتبات المضيف الأصلية لزيادة السرعة وتوافق الأجهزة. يمكنه محاكاة بيئة تنفيذ 32-بت لدعم البرامج القديمة ويتكامل مع نواة نظام التشغيل للتعرف تلقائياً على الملفات القابلة للتنفيذ الأجنبية وتشغيلها. يغطي النظام تنفيذ برامج Linux 64-بت و32-بت، وملفات Windows الثنائية، وعملاء الألعاب، بما في ذلك دعم تراكبات رسومات Vulkan. يوفر آليات لتجميع المكتبات، وتحميل حزم AppImage، وتحسين الأهداف الخاصة بالأجهزة. يدعم البرنامج التجميع الثنائي الساكن ويوفر سلسلة أدوات تجميع متقاطع للنشر عبر بنيات CPU مختلفة.

AFL is a coverage-guided fuzzer and security vulnerability scanner used to identify software bugs and memory corruption by feeding programs mutated data. It functions as a binary instrumentation tool and a test case minimizer to locate crashes and isolate the smallest set of bytes causing a fault. The project distinguishes itself through its ability to operate as a parallel fuzzing orchestrator, distributing workloads across multiple CPU cores or networked machines. It utilizes dictionary-based mutation for complex file formats and performs input sensitivity analysis to identify critical sect

proot-distro is a rootless container runtime and Linux distribution manager that allows users to install and run isolated guest environments without requiring administrative root privileges. It utilizes PRoot to simulate root access and filesystem redirection, enabling the deployment of full Linux distributions in a non-root space. The project functions as an OCI container image handler, capable of building, pulling, and pushing OCI-compatible images and manifests. It further serves as a cross-architecture execution layer, utilizing user-mode emulation to run binaries and containers built for