Awesome GitHub RepositoriesBinary Analysis Platforms

Unicorn is a multi-architecture CPU emulation framework and library that utilizes just-in-time compilation to execute instructions across various processor architectures, including ARM, x86, and RISC-V. It functions as both a JIT compilation engine and an instrumentation tool, allowing for the execution of machine code without the need for physical hardware. The framework is distinguished by its hook-based execution instrumentation, which enables the interception of specific instructions and memory accesses to trigger custom callback functions. It provides a language-agnostic binding layer an

Angr is a binary analysis framework and static analysis tool used for reverse engineering compiled binaries. It serves as a binary decompiler and a lifting platform that translates machine code into a common intermediate representation to enable cross-architecture analysis. The framework integrates a symbolic execution engine and constraint solvers to determine the inputs required to reach specific program states. It also employs untrusted code sandboxing to isolate guest code from the host environment during analysis. Its capabilities cover control flow and data flow analysis, including the

Capstone is a multi-architecture disassembly framework and binary translation system. It converts binary machine code into human-readable assembly instructions for a wide variety of hardware instruction set architectures and virtual machines. The framework supports a diverse range of targets, including x86, ARM, RISC-V, and MIPS, as well as virtual machine environments like WebAssembly and the Ethereum Virtual Machine. It functions as an instruction analysis tool capable of extracting granular decomposition data and semantic information from disassembled code. The engine is designed for low-

LIEF es un framework para analizar, modificar y analizar formatos binarios ejecutables y cachés compartidas del sistema en múltiples plataformas. Sirve como biblioteca multiplataforma para la manipulación programática de archivos binarios ELF, PE y MachO. El proyecto proporciona herramientas para alterar la estructura interna y las secciones de archivos ejecutables para cambiar el comportamiento del programa. Incluye además un analizador dedicado para recuperar bibliotecas dinámicas individuales de cachés compartidas del sistema combinadas. El conjunto de herramientas cubre el análisis de ejecutables binarios, desensamblado de código máquina y la extracción de metadatos de depuración e información de símbolos. Admite además la traducción bidireccional de código máquina y ensamblador a través de varias arquitecturas de procesador.

Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.