Awesome GitHub RepositoriesBinary Memory Loading

MAME is a vintage hardware emulation platform designed to recreate the circuitry of arcade games, computers, and consoles to run original software on modern devices. It functions as a retro gaming preservation framework for managing, verifying, and archiving ROM sets and disk images to ensure long-term software accessibility. The project features a system debugging tool for inspecting emulated memory, CPU registers, and execution flow via breakpoints and disassembly. It also includes a Lua-based automation layer that exposes core system state and hardware controls for custom behavior and anal

unidbg est un framework pour émuler et déboguer des binaires natifs ARM32 et ARM64 sur une machine hôte. Il sert de débogueur de binaires Android et iOS et d'émulateur de bibliothèque native, permettant l'exécution de code natif sans avoir besoin de matériel physique. Le projet se distingue par un framework de hooking de fonctions natives et un outil de débogage Model Context Protocol qui expose l'état de l'émulateur aux assistants IA pour une analyse binaire automatisée. Il inclut également un analyseur de mémoire spécialisé pour suivre les allocations côté invité et identifier les fuites dans les binaires natifs. La suite d'outils couvre plusieurs domaines de capacités, incluant l'ingénierie inverse de code natif, le traçage d'exécution au niveau des instructions et la simulation de pont JNI. Elle offre une observabilité via des logs de lecture/écriture mémoire et un débogueur console, tout en utilisant un pooling d'émulateurs thread-safe pour réduire la surcharge d'initialisation.

Qira is a binary analysis platform and execution tracer that records every instruction and data access during program execution for interactive playback and debugging. It functions as a runtime analysis environment that uses QEMU to trace execution and inspect memory and register states. The system provides a binary static analysis tool that maps program structure and annotates instructions based on captured runtime data. It includes a runtime memory analyzer to monitor reads and writes to specific addresses and an interactive debugger for navigating execution timelines. The platform covers

HyperDbg is a hardware-assisted kernel-mode debugging platform that leverages virtualization to monitor and control system execution. By utilizing hypervisor-level primitives, it enables deep system analysis and instrumentation without relying on standard operating system debugging interfaces. The framework provides a comprehensive environment for inspecting both kernel and user-mode processes, allowing for granular control over execution flow and system state. The project distinguishes itself through a transparent debugging layer designed to remain invisible to the target environment. It emp

ZealOS is a 64-bit operating system designed for bare-metal deployment and custom kernel development. It provides a self-contained environment that operates within a single-address-space memory model, where all software executes in a ring-zero privilege level to eliminate context switching and facilitate direct hardware interaction. The system distinguishes itself through a monolithic architecture that integrates just-in-time compilation, allowing source code to be translated into machine instructions during runtime. It bypasses traditional abstraction layers by utilizing direct hardware memo