Awesome GitHub RepositoriesBinary Analysis Platforms

Unicorn is a multi-architecture CPU emulation framework and library that utilizes just-in-time compilation to execute instructions across various processor architectures, including ARM, x86, and RISC-V. It functions as both a JIT compilation engine and an instrumentation tool, allowing for the execution of machine code without the need for physical hardware. The framework is distinguished by its hook-based execution instrumentation, which enables the interception of specific instructions and memory accesses to trigger custom callback functions. It provides a language-agnostic binding layer an

Angr is a binary analysis framework and static analysis tool used for reverse engineering compiled binaries. It serves as a binary decompiler and a lifting platform that translates machine code into a common intermediate representation to enable cross-architecture analysis. The framework integrates a symbolic execution engine and constraint solvers to determine the inputs required to reach specific program states. It also employs untrusted code sandboxing to isolate guest code from the host environment during analysis. Its capabilities cover control flow and data flow analysis, including the

Capstone is a multi-architecture disassembly framework and binary translation system. It converts binary machine code into human-readable assembly instructions for a wide variety of hardware instruction set architectures and virtual machines. The framework supports a diverse range of targets, including x86, ARM, RISC-V, and MIPS, as well as virtual machine environments like WebAssembly and the Ethereum Virtual Machine. It functions as an instruction analysis tool capable of extracting granular decomposition data and semantic information from disassembled code. The engine is designed for low-

LIEF est un framework pour analyser, modifier et examiner les formats binaires exécutables et les caches partagés système à travers plusieurs plateformes. Il sert de bibliothèque multiplateforme pour la manipulation programmatique des fichiers binaires ELF, PE et MachO. Le projet fournit des outils pour altérer la structure interne et les sections des fichiers exécutables afin de changer le comportement du programme. Il inclut également un analyseur dédié pour récupérer des bibliothèques dynamiques individuelles à partir de caches partagés système combinés. La boîte à outils couvre l'analyse binaire exécutable, le désassemblage de code machine et l'extraction de métadonnées de débogage et d'informations de symbole. Elle prend en outre en charge la traduction bidirectionnelle du code machine et de l'assemblage à travers diverses architectures de processeur.

Plasma is an interactive disassembler for x86/ARM/MIPS. It can generates indented pseudo-code with colored syntax.