1 repositorio
Awesome GitHub RepositoriesDisassembler Plugin Abstractions
Plugin interfaces that translate native disassembler APIs into a common feature extraction interface.
Distinct from Disassembler Frameworks: Distinct from Disassembler Frameworks: focuses on abstracting multiple disassembler backends through plugins, not adding processor architecture support.
Explore 1 awesome GitHub repository matching software engineering & architecture · Disassembler Plugin Abstractions. Refine with filters or upvote what's useful.
Awesome Disassembler Plugin Abstractions GitHub Repositories
Encuentra los mejores repositorios con IA.Buscaremos los repositorios que mejor coincidan usando IA.
- mandiant/capa
mandiant/capa
6,062Ver en GitHubcapa is a binary capability scanner that identifies high-level behaviors and actions an executable can perform, such as network communication or file manipulation. It functions as a malware behavior analysis tool and a MITRE ATT&CK mapping framework, scanning PE, ELF, .NET, and shellcode files through both static analysis and dynamic sandbox report processing. The tool distinguishes itself through a YAML-based detection rule engine that defines detection logic in human-readable files, with conditions expressed as feature combinations and logical operators. It integrates with IDA Pro, Ghidra,
Provides a plugin-based abstraction layer that translates native disassembler APIs into a unified feature extraction interface.
Python
