cwe_checker
A static analysis tool that detects Common Weakness Enumerations (CWEs) in binary executables across multiple CPU architectures.
What is cwe_checker?
cwe_checker is a suite of static analysis checks designed to detect common bug classes and vulnerabilities in binary executables. It focuses on ELF binaries commonly found on Linux and Unix systems, making it a valuable tool for firmware analysis and security auditing. The tool uses Ghidra to disassemble binaries into a common intermediate representation, enabling analysis across various CPU architectures like x86, ARM, MIPS, and PPC.
Security analysts and firmware reverse engineers who need to quickly identify potentially vulnerable code paths in binary executables, particularly those working with embedded systems or Linux/Unix binaries.
Developers choose cwe_checker for its multi-architecture support through Ghidra integration, extensive CWE coverage with configurable analyses, and easy setup via Docker. Its plugin-based architecture and ability to annotate results directly in Ghidra streamline the security auditing workflow.
Overview
cwe_checker finds vulnerable patterns in binary executables
Use Cases
Best For
- Security auditing of Linux and Unix ELF binaries across multiple CPU architectures (x86, ARM, MIPS, PPC).
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
