Awesome GitHub RepositoriesIntermediate Representation Lifting

Angr is a binary analysis framework and static analysis tool used for reverse engineering compiled binaries. It serves as a binary decompiler and a lifting platform that translates machine code into a common intermediate representation to enable cross-architecture analysis. The framework integrates a symbolic execution engine and constraint solvers to determine the inputs required to reach specific program states. It also employs untrusted code sandboxing to isolate guest code from the host environment during analysis. Its capabilities cover control flow and data flow analysis, including the

RetDec is a reverse engineering framework and static binary analysis tool. Its primary purpose is to function as an LLVM-based machine code decompiler that translates binary machine code from multiple architectures into high-level C source code. The system employs a multi-stage lifting pipeline to recover program logic, using an intermediate representation to apply optimizations before emitting source code. It distinguishes itself through the ability to identify compilers and packers, perform executable unpacking, and reconstruct class hierarchies and original program structures. The framewo

Retdec is an LLVM-based machine code decompiler and static binary analysis tool designed for binary reverse engineering. It translates binary executable code into high-level representations to facilitate the reconstruction of program logic from compiled machine code. The system utilizes a retargetable frontend architecture and a multi-stage lifting pipeline to convert raw bytes into a common intermediate language. It differentiates custom program logic from known library code through signature-based identification and provides utilities for binary symbol demangling to restore human-readable n

This project is a comprehensive Android reverse engineering suite that functions as a decompiler, bytecode deobfuscator, and malware analysis tool. It is designed to convert APK, DEX, and OAT binaries into human-readable source code using a native implementation that does not require a Java Virtual Machine. The platform is distinguished by its integration with Frida for dynamic analysis, allowing users to hook methods, inject custom JavaScript, and dump device memory in real time. It also features specialized security engines, including a taint propagation engine and a stack-state machine, to

SpotBugs Java एप्लिकेशन के लिए एक स्टेटिक एनालिसिस टूल और बाइटकोड एनालाइज़र है। यह कोड को निष्पादित किए बिना बग्स, सुरक्षा कमजोरियों और परफॉरमेंस समस्याओं की पहचान करने के लिए संकलित क्लास फ़ाइलों को स्कैन करता है। सिस्टम तार्किक त्रुटियों और API दुरुपयोग का पता लगाने के लिए एक बग डिटेक्टर और स्टेटिक एप्लिकेशन सुरक्षा परीक्षण टूल दोनों के रूप में कार्य करता है। यह प्रोजेक्ट एक प्लगइन-आधारित डिटेक्टर आर्किटेक्चर के माध्यम से खुद को अलग करता है जो कस्टम डिटेक्शन नियम जोड़ने के लिए बाहरी लाइब्रेरी के एकीकरण की अनुमति देता है। यह SQL इंजेक्शन, क्रॉस-साइट स्क्रिप्टिंग और पाथ ट्रैवर्सल जैसी कमजोरियों के लिए विशेष सुरक्षा ऑडिटिंग प्रदान करता है, साथ ही विश्लेषण सटीकता को परिष्कृत करने और गलत सकारात्मक (false positives) को कम करने के लिए एक मॉड्यूलर सिस्टम प्रदान करता है। यह टूल कॉनकरेंसी सिंक्रोनाइज़ेशन त्रुटियों, नल पॉइंटर डीरेफरेंस, संसाधन लीक और टाइप कास्टिंग त्रुटियों सहित डिटेक्शन क्षेत्रों की एक विस्तृत श्रृंखला को कवर करता है। यह डेड कोड, परफॉरमेंस अक्षमताओं और सीरियलाइज़ेशन मुहावरों के उल्लंघन की भी पहचान करता है। ये क्षमताएं कमांड-लाइन इंटरफ़ेस, ग्राफिकल यूजर इंटरफेस और एकीकृत विकास वातावरण (IDE) के भीतर सीधे एकीकरण के माध्यम से सुलभ हैं। SpotBugs को क्वालिटी गेट्स लागू करने और HTML या XML प्रारूपों में विश्लेषण रिपोर्ट उत्पन्न करने के लिए बिल्ड पाइपलाइनों में एकीकृत किया जा सकता है।

Miasm is a Python reverse engineering framework designed for binary analysis, disassembly, and modification. It functions as a binary analysis framework that lifts machine code into an intermediate representation to enable platform-independent security research. The system operates as a binary emulation engine and modification toolkit, allowing for the execution of binary code in a virtual environment to track state changes without native hardware. It provides tools for binary patching to update and modify raw binary files across multiple CPU architectures and executable formats. The framewo

Flare-floss is a security utility and static binary string extractor designed to uncover hidden text and configuration data within compiled binaries. It functions as an obfuscated string decoder and reverse engineering tool to translate encoded strings into readable text for security auditing. The project employs emulated execution to capture the decrypted state of strings in memory by running small chunks of binary code in a virtual CPU. It further utilizes static analysis disassembly, intermediate representation analysis, and heuristic-based pattern matching to identify and decode strings t

Phasar is a static analysis framework designed for the inspection of software logic through the processing of compiler intermediate representations. It provides a modular pipeline for building program representations, including call graphs, control flow graphs, and type hierarchies, which serve as the foundation for deep structural analysis of software behavior. The framework specializes in interprocedural data flow analysis and pointer alias resolution, enabling the tracking of information movement across function boundaries and the identification of indirect memory access patterns. By lever