A Python framework for disassembly, static analysis, symbolic execution, and debugging of binaries and malware.
Vivisect is a Python-based framework for binary analysis and reverse engineering that combines disassembly, static analysis, symbolic execution, and debugging capabilities. It helps security researchers and malware analysts understand the behavior and structure of compiled programs without access to source code.
Security researchers, malware analysts, and reverse engineers who need to analyze binary files, investigate malware, or understand proprietary software behavior.
Developers choose Vivisect because it integrates multiple analysis techniques into a single, extensible framework, eliminating the need to switch between disparate tools during complex investigations.
Vivisect is a comprehensive binary analysis and reverse engineering framework written in Python. It combines multiple analysis techniques into a single toolchain, making it valuable for security researchers, malware analysts, and software reverse engineers.
Vivisect aims to unify disparate binary analysis techniques into a cohesive, extensible framework that supports both automated and interactive workflows.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Integrates disassembly, static analysis, symbolic execution, and debugging into a single framework, reducing the need for tool switching during investigations, as highlighted in the project description.
Written in Python, it allows for easy scripting and integration with other security tools, making it highly customizable for advanced users.
Stores analysis results in serialized workspaces for ongoing investigations, enabling researchers to save and revisit complex analyses over time.
Features a dedicated docs page with quickstart guides and build status badges, indicating maintained and accessible resources for users.
Workspaces from Python 2 versions are not directly compatible, requiring conversion scripts and potentially losing data, as admitted in the README's upgrade notes.
The comprehensive framework demands significant time investment to master multiple analysis techniques, which can be daunting for newcomers without prior reverse engineering experience.
While GUI components are available via pip install, they may lack the polish and advanced features of commercial tools like IDA Pro, limiting interactive workflows.