A command-line Python tool for malware analysis with hex viewing, disassembly, file format support, and plugin architecture.
Pyew is a command-line Python tool for malware analysis that provides hex viewing, disassembly, and support for multiple file formats like PE, ELF, OLE2, and PDF. It solves the need for a flexible, scriptable environment to examine malicious software, enabling detailed code analysis and interactive exploration.
Security researchers, malware analysts, and reverse engineers who need a versatile, extensible tool for dissecting and understanding malicious software in various formats.
Developers choose Pyew for its combination of interactive command-line features, scriptable API, and plugin architecture, allowing deep customization and automation of malware analysis workflows not always available in other tools.
Official repository for Pyew.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Supports analysis of PE, ELF, OLE2, and PDF files as per the README, enabling comprehensive examination of diverse malicious document and executable types.
Allows following direct call/jmp instructions and displaying function names in the command line, facilitating real-time code navigation and data reference checks.
Includes an API for writing custom analysis scripts and a plugin architecture to add new capabilities, offering high customization for automated workflows.
Lacks a graphical user interface, which can hinder visual analysis and make it less accessible compared to GUI-based tools like IDA Pro or Ghidra.
Only disassembles Intel 16, 32, and 64-bit code as stated in the README, excluding common architectures like ARM, limiting its use in broader reverse engineering contexts.
The README is brief and redirects to a wiki for details, indicating that setup and advanced usage may require external resources, increasing initial learning effort.