Awesome GitHub RepositoriesBinary Assembly

Binaryen is a WebAssembly compiler toolchain and optimizer designed to transform, validate, and shrink binary modules. It provides a comprehensive intermediate representation framework that converts binary code into a single-assignment form to enable advanced program analysis and code transformation. The project includes a specialized transformation engine that applies iterative optimization passes to increase execution speed and reduce binary size. Additionally, it functions as a transpiler that translates WebAssembly binary modules into executable JavaScript for environments that lack nativ

WebAssembly Binary Toolkit 是一套用于检查、验证和转换 WebAssembly 模块（在二进制和人类可读表示之间）的工具集。它包括一个基于栈的解释器用于执行模块，以及一个将二进制文件转换为 C 源代码和头文件的转译器。 该工具包提供了将人类可读文本汇编为二进制模块，以及将二进制文件反汇编回文本的实用程序。它具有一个文本格式化程序，用于将定义规范化为标准的扁平表示，并支持将二进制文件转换为 S-expression 格式。 该项目涵盖了广泛的功能领域，包括二进制操作（如剥离元数据段）和模块检查（以提取结构统计信息和调试符号）。它还提供了针对技术规范验证二进制正确性的工具，以及用于执行符合 WASI 标准逻辑的运行时环境。

Smali is a two-way binary translation toolset designed to convert Dalvik bytecode to human-readable assembly and back again. It provides a mechanism for the disassembly and assembly of executable files used in virtual machine environments. The project enables the modification of compiled Android application logic by transforming binary files into editable assembly and rebuilding them. It is used for reverse engineering, malware analysis, and the study of low-level instructions to identify program behavior or security flaws. The toolkit covers binary construction through smali code assembly a

SASM 是一个跨平台集成开发环境，用于编写、汇编和调试底层汇编代码。它作为一个统一的编辑器和执行流，用于跨不同操作系统的汇编语言开发。 该环境在单个界面内支持多种汇编语言及其各自的工具链，包括 NASM、MASM、GAS 和 FASM。它具有一个二进制级调试器，允许单步执行指令并检查 CPU 寄存器和变量状态。 该项目提供了一个基于工具链的构建流水线和一个用于选择汇编器和链接器版本的配置系统。它还包括一个带有标签式文档管理和会话持久性的工作区管理器，以便在重启后恢复打开的文件。为了确保跨平台的一致行为，该软件采用了一个统一的包装器来标准化键盘输入和屏幕输出。

LIEF 是一个用于解析、修改和分析跨平台可执行二进制格式和系统共享缓存的框架。它作为一个跨平台库，用于程序化操作 ELF、PE 和 MachO 二进制文件。 该项目提供了用于更改可执行文件内部结构和段以改变程序行为的工具。它还包含一个专用解析器，用于从组合的系统共享缓存中恢复单个动态库。 该工具集涵盖了二进制可执行文件分析、机器码反汇编以及调试元数据和符号信息的提取。它进一步支持跨各种处理器架构的机器码和汇编的双向翻译。

这是一个针对 iOS 应用程序逆向工程的综合技术指南和课程。它作为一本手册，用于通过反汇编和调试工具剖析移动二进制文件，以分析内部应用程序逻辑和行为。 该材料作为 ARM 汇编和 Objective-C 理论的参考，提供了将底层机器代码转换为人类可读逻辑的必要框架。它将理论研究与实践练习相结合，以验证逆向工程工具在现实世界二进制文件上的使用。 范围涵盖静态二进制分析、动态运行时调试以及 iOS 系统架构的研究。这包括映射文件系统层级和数据组织，以定位应用程序资源和配置文件。

Miasm 是一个 Python 逆向工程框架，专为二进制分析、反汇编和修改而设计。它作为一个二进制分析框架，将机器码提升为中间表示，以实现平台无关的安全研究。 该系统作为二进制仿真引擎和修改工具包运行，允许在虚拟环境中执行二进制代码以跟踪状态更改，而无需原生硬件。它提供了二进制补丁工具，用于跨多种 CPU 架构和可执行格式更新和修改原始二进制文件。 该框架涵盖了反汇编、中间表示提升和语义简化功能，以消除二进制混淆。它包括对二进制格式解析和内存映射的支持，以便在分析编译程序时跟踪引用和布局。

HyperDbg is a hardware-assisted kernel-mode debugging platform that leverages virtualization to monitor and control system execution. By utilizing hypervisor-level primitives, it enables deep system analysis and instrumentation without relying on standard operating system debugging interfaces. The framework provides a comprehensive environment for inspecting both kernel and user-mode processes, allowing for granular control over execution flow and system state. The project distinguishes itself through a transparent debugging layer designed to remain invisible to the target environment. It emp

APKLab is an integrated security analysis platform and reverse engineering IDE for Android applications. It provides a unified environment for decompiling binaries into source code, repackaging modified applications into signed installers, and performing comprehensive security analysis. The platform distinguishes itself by combining static and dynamic analysis workflows. It enables the injection of runtime hooks and gadget libraries to monitor application behavior, while providing specialized patching capabilities to intercept and decrypt encrypted network traffic via a proxy. The toolkit co

PE-bear is a graphical portable executable analysis tool designed for inspecting, disassembling, and modifying the structure of Windows PE binary files. It functions as a static analysis framework used to identify malicious patterns and reverse engineer program logic. The project provides a binary diffing tool to identify structural and content differences between two executable files. It also includes a section editor for modifying binary layouts by adding or altering sections and imports. The tool covers a range of binary analysis capabilities, including machine code disassembly, file layo

This project is an ARMv8 assembly programming guide and tutorial designed to teach the translation of high-level logic into low-level machine instructions. It serves as a low-level systems programming reference for writing and executing code specifically for the ARMv8 architecture. The resource provides instructions for cross-platform assembly implementation, focusing on unifying symbol naming and memory addressing to ensure source code builds across different operating systems. It also covers the integration of assembly routines with higher-level languages using standardized calling conventi