cea-sec/miasm
Miasm
Miasm 是一个 Python 逆向工程框架，专为二进制分析、反汇编和修改而设计。它作为一个二进制分析框架，将机器码提升为中间表示，以实现平台无关的安全研究。
该系统作为二进制仿真引擎和修改工具包运行，允许在虚拟环境中执行二进制代码以跟踪状态更改，而无需原生硬件。它提供了二进制补丁工具，用于跨多种 CPU 架构和可执行格式更新和修改原始二进制文件。
该框架涵盖了反汇编、中间表示提升和语义简化功能，以消除二进制混淆。它包括对二进制格式解析和内存映射的支持，以便在分析编译程序时跟踪引用和布局。
Features
- Binary Analysis Frameworks - Offers a comprehensive environment for disassembling and analyzing compiled software binaries for security research.
- Reverse Engineering Tools - Analyzing compiled machine code to understand program logic and internal behavior without having access to the original source code.
- Binary Emulators - Execute binary code within a virtual environment to analyze behavior and state changes without using a host machine.
- 二进制修改工具包 - Provides tools for updating and patching raw binary files across multiple CPU architectures and executable formats.
- Binary Analysis Capabilities - Open and update binary programs across multiple formats to change the behavior of various architectures.
- 二进制汇编与反汇编 - Translate assembly language into machine code and convert binary bytes back into human-readable instructions.
- Binary Disassembly - Convert raw binary bytes into human-readable assembly instructions to reveal the underlying logic of a program.
- 二进制补丁 - Updating raw binary files to change program behavior or remove constraints across various executable formats and CPU architectures.
- Instruction-Level Emulators - Executing binary code within a controlled virtual environment to track state changes and memory access without running the code on hardware.
- Intermediate Representation Lifting - Translates architecture-specific assembly into a generic language to perform platform-independent analysis and simplification.
- 逆向工程框架 - Provides a Python-based framework for automating the disassembly and analysis of compiled programs.
- Virtual Machines - Executes binary instructions within a software-defined environment to track state changes without running on native hardware.
- 地址空间映射 - Maintains a database of binary locations and properties to track references and memory layout during analysis.
- Binary Format Decoders - Decodes various executable file structures to extract machine code and update binary data across different formats.
- 可插拔二进制解析器 - Decodes multiple executable file formats through a modular system to extract machine code and metadata.
- 二进制内存跟踪 - Maintain a database of binary locations and properties to manage addresses and references during analysis.
- Bytecode Assemblers - Converts human-readable assembly language into raw machine code bytes for binary modification and injection.
- Intermediate Representation Analysis - Provides a system for analyzing intermediate representations to enable platform-independent security research.
- Expression Simplifiers - Reduces complex assembly operations to their simplest forms using symbolic rules to strip away binary obfuscation.
- Program Logic Simplifiers - Reduce complex assembly expressions to their simplest form to automatically remove obfuscation from binaries.
- Malware Analysis - Examining suspicious binaries in virtual environments to identify malicious patterns and dismantle code designed to hide its purpose.
- 通用二进制补丁 - Ships utilities for modifying raw binary files and updating executable formats across different architectures.
