binaryanalysisplatform/qira 的主要功能有哪些？

binaryanalysisplatform/qira 的主要功能包括：Binary Execution Tracing, Binary and Reverse Engineering, Execution, Binary Debuggers, Binary Execution Analysis, Runtime Memory Analyzers, CPU Instruction Logs, QEMU-Based Binary Analysis Environments。

binaryanalysisplatform/qira 有哪些开源替代品？

binaryanalysisplatform/qira 的开源替代品包括： geohot/qira — Qira is a runtime analysis tool and interactive binary debugger designed for the QEMU emulator. It functions as a… zhkl0228/unidbg — unidbg is a framework for emulating and debugging ARM32 and ARM64 native binaries on a host machine. It serves as an… google/android-classyshark — Android Classyshark is a binary analysis toolset designed to extract structural data from Android executable files. It… radare/radare2 — radare2 is a reverse engineering framework and binary analysis toolset. It functions as a multi-architecture… orhun/binsider — Binsider is a collection of specialized toolsets for hexadecimal editing, ELF structural analysis, system call… janestreet/magic-trace — magic-trace collects and displays high-resolution traces of what a process is doing.

Qira

Qira 是一个二进制分析平台和执行跟踪器，记录程序执行期间的每一条指令和数据访问，以进行交互式回放和调试。它作为一个运行时分析环境，使用 QEMU 来跟踪执行并检查内存和寄存器状态。

该系统提供了一个二进制静态分析工具，用于映射程序结构并根据捕获的运行时数据注释指令。它包括一个用于监视对特定地址的读取和写入的运行时内存分析器，以及一个用于导航执行时间线的交互式调试器。

该平台涵盖了二进制跟踪可视化和逆向工程工作流，结合了内存状态快照和指令级事件日志记录。它进一步支持数据访问分析和维护用于记录二进制代码的地址映射注释数据库。

Features

Binary Execution Tracing - Records every instruction and data access during program execution to analyze runtime behavior via interactive playback.
Binary and Reverse Engineering - Supports annotating binary code and mapping program structure through combined static and runtime analysis.
Execution - Captures register and memory values at specific execution points to enable inspection via hex editors.
Binary Debuggers - Navigates execution timelines and inspects runtime memory through an integrated hex editor.
Binary Execution Analysis - Records and plays back program instructions to identify logic errors and runtime behavior using QEMU.
Runtime Memory Analyzers - Provides a memory tracking tool to monitor reads and writes to specific addresses within a binary execution trace.
CPU Instruction Logs - Records a sequential stream of CPU state changes to enable stepping forward and backward through execution.
QEMU-Based Binary Analysis Environments - Provides a runtime analysis environment that uses QEMU to trace execution and inspect memory and register states.
QEMU Execution Tracing - Captures every instruction and memory access by hooking into a QEMU virtual machine's runtime execution loop.
Static Binary Analysis - Maps program structure and annotates instructions based on captured runtime execution data.
Data Access Tracing - Tracks reads and writes to specific memory addresses across execution traces to identify data modification points.
Binary Execution Tracers - Records every instruction and data access during program execution for interactive playback and debugging.
Runtime Memory Explorers - Tracks memory reads and writes to specific addresses and inspects register states during program execution.
Processor State Inspection - Allows inspection of CPU register values and memory contents via a hex editor at specific execution points.
Address-Mapped Annotation Databases - Stores user-defined labels and comments linked to specific binary memory addresses for persistent documentation.
Code Annotations - Provides utilities for adding custom names and comments to specific binary addresses to document findings.
Execution Flow Tracing - Builds a structural map of the program by analyzing the sequence of executed instructions and function calls.
Runtime-Driven Structural Analysis - Maintains a database of addresses and tags derived from runtime traces to map overall program structure.
Execution Trace Visualizers - Provides an interface for navigating program execution timelines and jumping between function boundaries.
Interactive Timeline Visualizations - Indexes execution events to allow rapid jumping between specific instruction invocations and execution boundaries.
Execution Trace Navigators - Ships a visual timeline interface for browsing program execution and jumping between instruction invocations.
Exploitation Frameworks - Interactive runtime analyzer for binary analysis.

Star 历史

BinaryAnalysisPlatformqira

Name: binaryanalysisplatform/qira
Author: BinaryAnalysisPlatform

View on GitHub

4,071 星标467 分支CMIT2 次浏览

Qira

Features

Binary Execution Tracing - Records every instruction and data access during program execution to analyze runtime behavior via interactive playback.
Binary and Reverse Engineering - Supports annotating binary code and mapping program structure through combined static and runtime analysis.
Execution - Captures register and memory values at specific execution points to enable inspection via hex editors.
Binary Debuggers - Navigates execution timelines and inspects runtime memory through an integrated hex editor.
Binary Execution Analysis - Records and plays back program instructions to identify logic errors and runtime behavior using QEMU.
Runtime Memory Analyzers - Provides a memory tracking tool to monitor reads and writes to specific addresses within a binary execution trace.
CPU Instruction Logs - Records a sequential stream of CPU state changes to enable stepping forward and backward through execution.
QEMU-Based Binary Analysis Environments - Provides a runtime analysis environment that uses QEMU to trace execution and inspect memory and register states.
QEMU Execution Tracing - Captures every instruction and memory access by hooking into a QEMU virtual machine's runtime execution loop.
Static Binary Analysis - Maps program structure and annotates instructions based on captured runtime execution data.
Data Access Tracing - Tracks reads and writes to specific memory addresses across execution traces to identify data modification points.
Binary Execution Tracers - Records every instruction and data access during program execution for interactive playback and debugging.
Runtime Memory Explorers - Tracks memory reads and writes to specific addresses and inspects register states during program execution.
Processor State Inspection - Allows inspection of CPU register values and memory contents via a hex editor at specific execution points.
Address-Mapped Annotation Databases - Stores user-defined labels and comments linked to specific binary memory addresses for persistent documentation.
Code Annotations - Provides utilities for adding custom names and comments to specific binary addresses to document findings.
Execution Flow Tracing - Builds a structural map of the program by analyzing the sequence of executed instructions and function calls.
Runtime-Driven Structural Analysis - Maintains a database of addresses and tags derived from runtime traces to map overall program structure.
Execution Trace Visualizers - Provides an interface for navigating program execution timelines and jumping between function boundaries.
Interactive Timeline Visualizations - Indexes execution events to allow rapid jumping between specific instruction invocations and execution boundaries.
Execution Trace Navigators - Ships a visual timeline interface for browsing program execution and jumping between instruction invocations.
Exploitation Frameworks - Interactive runtime analyzer for binary analysis.

Qira 的开源替代方案

相似的开源项目，按与 Qira 的功能重合度排序。

geohot/qira
geohot/qira
4,070在 GitHub 上查看
Qira is a runtime analysis tool and interactive binary debugger designed for the QEMU emulator. It functions as a binary execution tracer that records a full timeline of instruction invocations and provides a system for monitoring memory operations within guest processes. The project enables the analysis of compiled binaries by tracing instruction-level execution and mapping raw memory addresses to user-defined annotations. It includes capabilities for state-snapshotting to manage execution forks, allowing the navigation of divergent logic paths and the inspection of CPU register states and s
C
在 GitHub 上查看4,070
google/android-classyshark
google/android-classyshark
7,565在 GitHub 上查看
Android Classyshark is a binary analysis toolset designed to extract structural data from Android executable files. It functions as a bytecode viewer and binary XML parser to analyze compiled Java and Android binaries. The project converts binary XML files into readable formats for the inspection of application manifests, layouts, and resource files. It also provides the ability to analyze class interfaces, members, and dependency counts without requiring access to the original source code. The toolset supports static analysis and the export of binary information into plain text formats for
Java
在 GitHub 上查看7,565
radare/radare2
radare/radare2
24,129在 GitHub 上查看
radare2 is a reverse engineering framework and binary analysis toolset. It functions as a multi-architecture disassembler, low-level binary debugger, and hexadecimal editor for inspecting executable structures and interpreting machine code when original source files are unavailable. The framework provides capabilities for decompiling machine instructions, performing symbolic analysis, and diffing binary files to identify structural changes across versions. It also includes a digital forensic analyzer and disk analyzer for browsing filesystem formats in userland. The toolset supports binary p
C
在 GitHub 上查看24,129
zhkl0228/unidbg
zhkl0228/unidbg
5,028在 GitHub 上查看
unidbg is a framework for emulating and debugging ARM32 and ARM64 native binaries on a host machine. It serves as an Android and iOS binary debugger and native library emulator, allowing for the execution of native code without the need for physical hardware. The project distinguishes itself through a native function hooking framework and a Model Context Protocol debugging tool that exposes emulator state to AI assistants for automated binary analysis. It also includes a specialized memory analyzer for tracking guest-side allocations and identifying leaks in native binaries. The toolset cove
Javaandroidcapstonedebugger
在 GitHub 上查看5,028

查看 Qira 的所有 30 个替代方案

常见问题解答

binaryanalysisplatform/qira 是做什么的？