cea-sec/miasm

Features

• Binary Analysis Frameworks - Offers a comprehensive environment for disassembling and analyzing compiled software binaries for security research.
• Reverse Engineering Tools - Analyzing compiled machine code to understand program logic and internal behavior without having access to the original source code.
• Binary Emulators - Execute binary code within a virtual environment to analyze behavior and state changes without using a host machine.
• Binary Modification Toolkits - Provides tools for updating and patching raw binary files across multiple CPU architectures and executable formats.
• Binary Analysis Capabilities - Open and update binary programs across multiple formats to change the behavior of various architectures.
• Binary Assembly and Disassembly - Translate assembly language into machine code and convert binary bytes back into human-readable instructions.
• Binary Disassembly - Convert raw binary bytes into human-readable assembly instructions to reveal the underlying logic of a program.
• Binary Patching - Updating raw binary files to change program behavior or remove constraints across various executable formats and CPU architectures.
• Instruction-Level Emulators - Executing binary code within a controlled virtual environment to track state changes and memory access without running the code on hardware.
• Intermediate Representation Lifting - Translates architecture-specific assembly into a generic language to perform platform-independent analysis and simplification.
• Reverse Engineering Frameworks - Provides a Python-based framework for automating the disassembly and analysis of compiled programs.
• Virtual Machines - Executes binary instructions within a software-defined environment to track state changes without running on native hardware.
• Address Space Mappings - Maintains a database of binary locations and properties to track references and memory layout during analysis.
• Binary Format Decoders - Decodes various executable file structures to extract machine code and update binary data across different formats.
• Pluggable Binary Parsers - Decodes multiple executable file formats through a modular system to extract machine code and metadata.
• Binary Memory Tracking - Maintain a database of binary locations and properties to manage addresses and references during analysis.
• Bytecode Assemblers - Converts human-readable assembly language into raw machine code bytes for binary modification and injection.
• Intermediate Representation Analysis - Provides a system for analyzing intermediate representations to enable platform-independent security research.
• Expression Simplifiers - Reduces complex assembly operations to their simplest forms using symbolic rules to strip away binary obfuscation.
• Program Logic Simplifiers - Reduce complex assembly expressions to their simplest form to automatically remove obfuscation from binaries.
• Malware Analysis - Examining suspicious binaries in virtual environments to identify malicious patterns and dismantle code designed to hide its purpose.
• Generic Binary Patching - Ships utilities for modifying raw binary files and updating executable formats across different architectures.

Star history