Binary Analysis
Showing 36 of 120 projects
Discovers vulnerabilities in firmware using concolic analysis and function clustering.
Detect image file types from Buffer/Uint8Array data with support for 20+ formats including PNG, JPEG, WebP, and HEIC.
An interactive, retargetable disassembler with IDAPython-compatible plugin API for static analysis and reverse engineering.
A collaborative malware analysis framework for storing samples, automating analysis, and sharing insights via IDA Pro integration.
A binary diffing and patch analysis tool for reverse engineering and vulnerability research.
A reverse engineering tool that uses DynamoRIO and Capstone to automatically recover data structures from ELF binaries by monitoring memory accesses.
Idiomatic Rust bindings for the IDA SDK, enabling development of standalone binary analysis tools.
A Python tool that analyzes embedded device firmware to identify potential security vulnerabilities and sensitive indicators.
Recovers and reconstructs fragments of EVTX log files from raw binary data, including unallocated space and memory images.
A library for programmatic modification and evaluation of software across source code, assembly, and binary formats.
A Delphi debug framework providing stack traces, CPU register snapshots, debug info access, and PE file utilities.
A Python toolset for malware analysis using function-level fuzzy hashing to catalog and compare malicious binaries.
A toolkit for extracting and simplifying virtualized binary code from 32-bit execution traces.
A Python utility to search for strings, imports, exports, and debug symbols within Windows PE executables using regular expressions.
An abstract interpretation-based static analysis platform for disassembling and analyzing binary executables to recover control flow graphs.
A reverse engineering tool that removes virtual machine-based obfuscation from malware by analyzing runtraces and extracting original bytecode.
A scalable malware processing and analytics platform built on Hadoop Pig for binary data extraction and analysis.
A backend-agnostic debugger frontend for reverse engineering and analyzing binaries without source code access.
A fast IDA Pro plugin that finds calls to insecure API functions in binaries to aid vulnerability research.
A fast IDA Pro headless plugin that extracts decompiled pseudocode for vulnerability research and static analysis.
A macOS GUI application for browsing and inspecting Mach-O binary files (executables, libraries, object files).
Fast, parallel, cross-variant ROP/JOP gadget search tool for x86/x64 binaries, supporting exploit development.
A fast IDA Pro headless plugin that extracts strings and related pseudocode from binary files for reverse engineering.
A library to call functions from stripped binaries across platforms using only file name, offset, and signature.
A type-aware kernel fuzzing framework for Windows that uses static binary analysis to infer system call types for more effective fuzzing.
A command-line tool that detects file types by analyzing file signatures and magic bytes.
A tool to find code caves (empty space) in PE files (exe, dll) for x86/x64 Windows, useful for shellcode placement.
A cross-platform Rust library and CLI tool for parsing, verifying, and extracting digital signatures from PE files.
A Sublime Text 3 plugin providing malware analysis tools like encoding/decoding, XOR brute-forcing, and PE scanning.
A library for parsing and manipulating Windows Portable Executable (PE) files.
A polymorphic runtime cryptor that XOR-encrypts the .text section of x86_64 ELF binaries on Linux, changing the hash on each execution.
A curated dataset of 1,044,394 Windows executable samples with frequency-domain image representations for malware detection research.
A Windows x86 PE packer written in pure C/C++ that implements a linker for repackaging executables with in-memory decompression.
Detects packers in PE/ELF/Mach-O executables by analyzing entropy to identify compressed or encrypted bytes.
A collection of reverse engineering challenges including crackmes, keygenmes, and serialmes for educational purposes.
A framework for automated cryptographic primitive classification using dynamic binary instrumentation and deep learning.
Related Tags
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.