BinSkim
A lightweight static analysis tool that validates security and correctness characteristics of Windows PE and Linux ELF binaries.
What is BinSkim?
BinSkim is a binary static analysis tool that scans Windows Portable Executable (PE) and Linux ELF binaries to validate security and correctness characteristics. It checks compiler/linker settings and other binary properties to identify potential vulnerabilities and misconfigurations, outputting results in the SARIF format for easy integration into development workflows.
Security engineers, DevOps professionals, and developers who need to validate the security posture of compiled binaries, especially those integrating security scanning into CI/CD pipelines.
Developers choose BinSkim for its lightweight, cross-platform binary analysis focused on security validation, its standardized SARIF output for tool interoperability, and its ease of integration into automated build processes via a simple command-line interface.
Overview
A binary static analysis tool that provides security and correctness results for Windows Portable Executable and *nix ELF binary formats
Use Cases
Best For
- Validating security compiler flags in Windows PE binaries
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
