PANDA
Platform for Architecture-Neutral Dynamic Analysis built on QEMU, enabling whole-system record/replay and cross-architecture analysis.
What is PANDA?
PANDA is an open-source Platform for Architecture-Neutral Dynamic Analysis built on the QEMU whole system emulator. It enables security researchers and reverse engineers to perform deep, whole-system analyses by providing access to all code and data in guest systems, with the unique capability to record and replay executions for repeatable experiments.
Security researchers, reverse engineers, and academic researchers who need to perform deep dynamic analysis of whole systems across multiple CPU architectures.
Developers choose PANDA for its architecture-neutral approach that supports 13 CPU architectures through LLVM IR, its compact and shareable record/replay system, and its plugin architecture that simplifies complex analysis development with code re-use.
Overview
Deprecated repo for PANDA 1.0 – see PANDA 2.0 repository
Use Cases
Best For
- Performing dynamic taint analysis across multiple CPU architectures
- Recording and replaying whole-system executions for security research
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
