Awesome GitHub RepositoriesBinary Analysis

The Mobile Application Security Testing Guide is a comprehensive manual and compliance framework for verifying the security of mobile applications. It provides a standardized reference for identifying and validating common software security weaknesses and performing reverse engineering based on industry standards. The project provides a structured set of technical processes and checklists used to audit applications against established security weakness enumerations. It encompasses guidance for analyzing application binaries and runtime behavior to identify hidden functionality and security ga

This project is a security tool installation framework and binary analysis toolkit designed to automate the deployment of research utilities. It provides a containerized security research environment and a system for managing Python and Ruby virtual environments to prevent dependency conflicts on the host machine. The framework distinguishes itself through a structured tool catalog and provisioning scripts that automate the installation of utilities into isolated directories. It utilizes executable symlink mapping to provide a unified command interface and supports the bootstrapping of consis

Angr is a binary analysis framework and static analysis tool used for reverse engineering compiled binaries. It serves as a binary decompiler and a lifting platform that translates machine code into a common intermediate representation to enable cross-architecture analysis. The framework integrates a symbolic execution engine and constraint solvers to determine the inputs required to reach specific program states. It also employs untrusted code sandboxing to isolate guest code from the host environment during analysis. Its capabilities cover control flow and data flow analysis, including the

MBE is a security research educational resource providing binary exploitation courseware and a deployable CTF wargame environment. It functions as a structured curriculum of labs and materials designed for learning reverse engineering and memory corruption. The project provides containerized lab infrastructure and a binary analysis toolchain to ensure a controlled setting for vulnerability research. It utilizes isolated environments to deploy binary exploitation tasks, preventing interference and system instability. The system covers the provisioning of vulnerable environments through virtua

Bloaty एक बाइनरी साइज़ प्रोफ़ाइलर और निष्पादन योग्य फ़ॉर्मेट एनालाइज़र है जो बाइनरी के प्रत्येक बाइट को विशिष्ट सिम्बल्स या कंपाइल यूनिट्स के लिए जिम्मेदार ठहराता है। यह एक कंपाइलेशन यूनिट प्रोफ़ाइलर और C++ सिंबल डीमैंगलर के रूप में कार्य करता है, जो बाइनरी साइज़ को वापस सोर्स फ़ाइलों में मैप करता है और मैंगल्ड नामों को मानव-पठनीय फ़ॉर्मेट्स में अनुवादित करता है। यह प्रोजेक्ट एक बाइनरी डिफ़िंग टूल के रूप में खुद को अलग करता है जो साइज़ रिग्रेशन के लिए जिम्मेदार विशिष्ट सिम्बल्स या सेक्शन्स को अलग करने के लिए बाइनरी के दो वर्ज़न्स की तुलना करने में सक्षम है। यह बिल्ड आइडेंटिफ़ायर्स का उपयोग करके बाहरी डीबग फ़ाइलों के साथ जोड़कर स्ट्रिप्ड बाइनरीज़ में सिम्बल्स को रिकवर करने के लिए विशेष समर्थन प्रदान करता है। यह टूल ELF, Mach-O, PE/COFF और WebAssembly फ़ॉर्मेट्स के लिए व्यापक बाइनरी विश्लेषण प्रदान करता है। इसकी क्षमताओं में लिंकर सेक्शन्स, मेमोरी सेगमेंट्स और स्टेटिक लाइब्रेरी आर्काइव्स का विश्लेषण करना, साथ ही इनलाइंड फ़ंक्शंस द्वारा खपत की गई जगह की पहचान करना शामिल है। यूज़र्स रेगुलर एक्सप्रेशन फ़िल्टरिंग का उपयोग करके डेटा को और अलग कर सकते हैं और CSV या TSV फ़ॉर्मेट्स में प्रोफ़ाइलिंग परिणाम निर्यात कर सकते हैं।

AFL is a coverage-guided fuzzer and security vulnerability scanner used to identify software bugs and memory corruption by feeding programs mutated data. It functions as a binary instrumentation tool and a test case minimizer to locate crashes and isolate the smallest set of bytes causing a fault. The project distinguishes itself through its ability to operate as a parallel fuzzing orchestrator, distributing workloads across multiple CPU cores or networked machines. It utilizes dictionary-based mutation for complex file formats and performs input sensitivity analysis to identify critical sect

ipsw is a specialized toolkit for iOS firmware analysis, binary reverse engineering, and hardware interaction. It provides a suite of tools for downloading, extracting, and analyzing firmware images and kernel caches, alongside a MachO binary analysis tool for disassembling and patching executables. The project distinguishes itself through integrated language-model-powered code reconstruction to translate machine code into high-level source code. It also features an automation client for the App Store Connect API to manage certificates and application settings. The framework covers a broad r

IDA एकीकरण के साथ बाइनरी कोड स्टेटिक एनालाइज़र। वैल्यू और टेंट विश्लेषण, टाइप पुनर्निर्माण, यूज़-आफ्टर-फ्री और डबल-फ्री डिटेक्शन करता है

Twiggy🌱 is a code size profiler

A static analyzer for PE executables.

A binary static analysis tool that provides security and correctness results for Windows Portable Executable and *nix ELF binary formats

Make production Rust binaries auditable

HaboMalHunter is a sub-project of Habo Malware Analysis System (https://habo.qq.com), which can be used for automated malware analysis and security assessment on the Linux system.

The purpose of this project is to analyse a raw binary firmware and determine automatically some of its features. This tool is compatible with all architectures as basically, it just does simple statistics on it.

Linker/Compiler/Tool detector for Windows, Linux and MacOS.

chap analyzes un-instrumented core files for leaks, memory growth, and corruption

A malware/botnet analysis framework written in Ruby.

The Jakstab static analysis platform for binaries

BinAbsInspector (Binary Abstract Inspector) is a static analyzer for automated reverse engineering and scanning vulnerabilities in binaries, which is a long-term research project incubated at Keenlab. It is based on abstract interpretation with the support from Ghidra. It works on Ghidra's Pcode…