Awesome GitHub RepositoriesBinary Data Analysis

ImHex is a professional-grade hex editor and binary data analysis platform designed for inspecting, modifying, and reverse engineering raw file contents. It functions as a schema-driven engine that interprets complex binary structures by applying custom definitions to map and visualize byte-level data. The platform distinguishes itself through a dedicated domain-specific language that allows users to define structural schemas for automated file parsing. This capability is supported by a dynamic plugin architecture and an event-driven registry, which enable the integration of external modules

fq 是一个命令行二进制数据处理器，用于将原始字节流和位级数据解码、转换和分析为结构化格式。它作为一个函数式二进制查询引擎，允许对二进制结构进行过滤和映射，同时也是一个转换器，将复杂的二进制 Blob 和专有文件格式转换为标准的 JSON、YAML 或 XML。 该工具作为低级位操作器，能够对原始文件执行位级切片、位运算和加密哈希。它还作为一个网络协议分析器，能够重组碎片化的 TCP 流并解密 TLS 流量以进行应用级检查。 该项目涵盖了二进制解析和数据转换方面的广泛功能，包括对自定义解码器定义的支持，以及对 Mach-O、ASN1 BER 和 Avro OCF 等多种专业格式的支持。它提供了用于二进制树搜索、结构化文本解码以及二进制与文本格式之间双向序列化的工具。 用户可以通过命令行界面和用于实时查询测试的交互式 REPL 与系统进行交互。

Hexyl is a colored hex dump utility and binary data viewer for the terminal. It allows for the inspection of binary files by rendering contents as a colored hex dump to distinguish between different byte categories, such as printable text, whitespace, and null bytes. The tool includes a C-style hex exporter that transforms binary data into C include files for direct integration into source code. It supports visual layout customization through configurable panels and borders, as well as the ability to define colors for byte categories and offsets using terminal colors or RGB hex codes via envi

dnSpy is a specialized suite of tools for the reverse engineering of .NET assemblies, functioning as a decompiler, assembly editor, and debugger. It translates compiled intermediate language back into high-level source code and provides an execution environment for stepping through compiled binaries to inspect runtime state without the original source files. The project includes a BAML decompiler that converts binary application markup language into a disassembled format and translates it into extensible markup language for user interface analysis. It also functions as a binary analysis tool

Qira 是一个为 QEMU 模拟器设计的运行时分析工具和交互式二进制调试器。它作为一个二进制执行跟踪器，记录指令调用的完整时间线，并提供一个用于监视客户进程内内存操作的系统。 该项目通过跟踪指令级执行并将原始内存地址映射到用户定义的注释，实现了对编译二进制文件的分析。它包括用于管理执行分支的状态快照功能，允许导航不同的逻辑路径，并在记录的时间线上的任何单点检查 CPU 寄存器状态和系统调用参数。 该系统涵盖了广泛的动态程序分析和二进制逆向工程任务。这包括监视内存访问模式以识别修改特定数据的指令、在受控环境中分析恶意软件行为以及进行软件漏洞研究。

x-cmd is an AI agent orchestrator, cloud infrastructure CLI, and cross-platform package manager that provides an enhanced POSIX shell toolkit. It integrates large language models directly into the terminal for chatting, code generation, and the execution of agentic workflows, while offering a framework for building interactive terminal user interface components. The project distinguishes itself by deploying containerized AI agents within isolated sandboxes, provisioning them with specialized skills and headless browser automation capabilities. It further streamlines development through a unif

python-magic is a C-binding wrapper that provides a Python interface for the libmagic system library. It functions as a file signature analyzer and MIME type detector, identifying file formats by comparing header bytes against a database of known binary signatures. The library enables the identification of file types from both file paths and raw data buffers. It supports custom file signature matching through the injection of user-provided magic databases, allowing for the detection of specialized or proprietary formats. The project covers binary data analysis and MIME type mapping to transl