Search Results for "binary analysis"
Sort By:
Showing 122 open source projects for "binary analysis"
View related business solutions-
Save Up to 91% on Cloud Compute With Spot VMsRun batch jobs at 60-91% off with Spot VMs. Long-running workloads get automatic discounts with sustained use.
-
Go from Code to Production URL in SecondsSkip the Kubernetes configs. Cloud Run handles HTTPS, scaling, and infrastructure automatically. Two million requests free per month.
-
1
Binary Ninja MCP
A Binary Ninja plugin, MCP server
The Binary Ninja MCP is a plugin and bridge that integrates Binary Ninja with Large Language Model clients via the Model Context Protocol, enhancing reverse engineering workflows with AI assistance. -
2
Il2CppDumper
Unity il2cpp reverse engineer
...The tool supports executable formats such as ELF, ELF64, Mach-O, PE, NSO, and WASM. It supports Unity versions from 5.3 through 2022.2, according to the repository documentation. Il2CppDumper can generate helper scripts for IDA, Ghidra, and Binary Ninja, along with structure headers and JSON outputs. It is best suited for authorized reverse engineering, interoperability research, security analysis, modding research, and educational binary analysis. -
3
Ghidra MCP
Socket based MCP Server for Ghidra
GhidraMCP is a Ghidra plugin implementing the Model Context Protocol, bridging Ghidra's reverse engineering capabilities with AI assistants to enhance binary analysis tasks. -
4
Joern
Open-source code analysis platform for C/C++/Java/Binary/Javascript
Joern is a platform for analyzing source code, bytecode, and binary executables. It generates code property graphs (CPGs), a graph representation of code for cross-language code analysis. Code property graphs are stored in a custom graph database. This allows code to be mined using search queries formulated in a Scala-based domain-specific query language. Joern is developed with the goal of providing a useful tool for vulnerability discovery and research in static program analysis. -
Build Agents and Models on One PlatformGemini Enterprise Agent Platform is Google Cloud's comprehensive platform for developers to build, scale, govern, and optimize agents and models. Choose from Google's most advanced models and third-party models like Anthropic's Claude Model Family.
-
5
Detect It Easy
Program for determining types of files for Windows, Linux and MacOS
Detect It Easy (DiE) is a tool for determining the type and internal features of binary and other file formats. It is widely used by malware analysts, digital forensics investigators, reverse engineers, and security researchers to quickly inspect unknown files and infer their type, architecture, compiler/packer used, and internal structure. DiE supports a large variety of file formats — from common executables (Windows PE, Linux ELF, macOS Mach-O) to archives, mobile packages (APK, IPA), legacy binaries, compressed or packed files, and more — making it a versatile first step in analysis or triage workflows. ... -
6
LIEF
LIEF - Library to Instrument Executable Formats (C++, Python, Rust)
LIEF (Library to Instrument Executable Formats) is a cross-platform library that enables parsing, modifying, and abstracting executable formats such as ELF, PE, and Mach-O. It's widely used in reverse engineering and binary analysis. -
7
MatImage
Image Processing library for Matlab
matImage is an open-source MATLAB library for image processing and analysis. It provides a variety of tools for image enhancement, segmentation, and feature extraction. It’s especially useful for users working on biomedical images or those needing detailed image analysis in MATLAB. -
8
codebase-memory-mcp
High-performance code intelligence MCP server
...It indexes codebases into a persistent knowledge graph so agents can understand architecture, symbols, call chains, routes, and cross-service relationships without reading every file repeatedly. The project uses tree-sitter AST analysis across 158 languages and adds Hybrid LSP type resolution for major languages like Python, TypeScript, JavaScript, Go, C#, Java, Rust, C, and C++. It is built for speed, with average repositories indexed in milliseconds and structural queries answered in under one millisecond. It ships as a single static binary for macOS, Linux, and Windows with no shared library dependencies. ... -
9
URH (Universal Radio Hacker)
Universal Radio Hacker: Investigate Wireless Protocols Like A Boss
Universal Radio Hacker (URH) is a tool for investigating unknown wireless communication protocols. It supports signal capturing, decoding, modulation analysis, and protocol reverse engineering through an intuitive graphical interface. URH is used in research, security testing, and hobbyist electronics for understanding proprietary RF systems, IoT device communication, and embedded protocols. -
$300 Free Credits to Build on Google CloudStart your next project with $300 in free Google Cloud credit. Spin up VMs, run containers, query petabytes in BigQuery, or build agents with Gemini Enterprise Agent Platform. Once your credits are used, keep building with 20+ always-free tier products including Compute Engine, Cloud Storage, GKE, and Cloud Run functions. No commitment required—just sign up and start building.
-
10
Linguist
Detect blob languages, suppress generated files and generate graphs
This library is used on GitHub.com to detect blob languages, ignore binary or vendored files, suppress generated files in diffs, and generate language breakdown graphs. Linguist is a Ruby library so you will need a recent version of Ruby installed. There are known problems with the macOS/XCode supplied version of Ruby that causes problems installing some of the dependencies. Accordingly, we highly recommend you install a version of Ruby using Homebrew, rbenv, rvm, ruby-build, asdf or other... -
11
Perfetto
Production-grade client-side tracing, profiling, and analysis
Perfetto is a production-grade tracing platform for Android, Linux, and Chrome that captures extremely detailed information about what a system is doing over time. It’s designed around a low-overhead producer/consumer model: instrumented components (“producers”) write binary events into shared memory buffers and a collector (“service”) reliably streams them to storage. The data model spans kernel and userspace, so you can stitch together CPU scheduling, app lifecycles, binder/IPC hops, GPU work, power and thermal signals, file I/O, heap samples, and more into a single coherent timeline. Perfetto’s ecosystem includes a web-based UI that can load multi-GB traces directly in the browser and an offline “trace processor” that exposes the trace as a queryable SQL-like table schema for deep analysis and automation. ... -
12
REDasm
The OpenSource Disassembler
REDasm is a cross-platform disassembler with a modern codebase useful from the hobbyist to the professional reverse engineer. All features are provided by LibREDasm which loads plugins developed in C, C++, and Python3 (you can also support new languages if you want!) and an user-friendly Qt frontend. You can hack and improve REDasm without any issues and limitations. -
13
Ameba
A static code analysis tool for Crystal
Code-style linter for Crystal. A single-celled animal that catches food and moves about by extending fingerlike projections of protoplasm. Ameba is a static code analysis tool for the Crystal language. It enforces a consistent Crystal code style, and also catches code smells and wrong code constructions. Ameba allows you to dig deeper into an issue, by showing you details about the issue and the reasoning behind it being reported. Starting from 0.31.0 Crystal supports parallelism. It allows... -
14
Vedo
A python module for scientific analysis of 3D data
...Export meshes as ASCII or binary to VTK, STL, OBJ, PLY formats. Analysis tools like Moving Least Squares, mesh morphing and more. Tools to visualize and edit meshes (cutting a mesh with another mesh, slicing, normalizing, moving vertex positions, etc..). Split mesh based on surface connectivity. Extract the largest connected area. Calculate areas, volumes, center of mass, average sizes etc. -
15
DeepSeek Engineer v2
A powerful coding assistant application
DeepSeek Engineer v2 is an AI-powered coding assistant built around DeepSeek models and an interactive terminal workflow. It lets developers discuss code, request analysis, and perform project work through natural language. Version 2.0 focuses on native function calling instead of rigid structured JSON responses. The assistant can read files, read multiple files, create files, create multiple files, and edit specific snippets when needed. It includes safeguards such as path validation, directory traversal protection, file size limits, and binary file exclusion. ... -
16
cljfmt
A tool for formatting Clojure code
cljfmt is a static analysis and formatting tool for Clojure code, enforcing styling rules derived from the official Clojure Style Guide. It detects and fixes formatting errors while preserving code structure. It integrates with Clojure CLI, Leiningen, Brew, and can run as a standalone, CLI tool, or build plugin. -
17
Zydis
Fast and lightweight x86/x86-64 disassembler and code generation lib
Zydis is a fast and lightweight disassembler library designed for decoding x86 and x86-64 machine code into human-readable assembly instructions. It focuses on performance and accuracy, making it suitable for applications such as reverse engineering, debugging, and binary analysis. The library provides detailed information about decoded instructions, including operands, prefixes, and instruction lengths, enabling deep inspection of executable code. It is designed to be easy to integrate, with a clean and minimal API that reduces complexity for developers. Zydis also emphasizes portability, allowing it to run across multiple platforms and environments. ... -
18
yek
Serialize repositories into LLM-ready context w/ smart prioritization
...Configuration is handled through a yek.yaml file, allowing users to define ignore rules and priority settings. By consolidating code and documents into a single, ordered format, Yek simplifies preparing repositories for AI-driven analysis, debugging, or automation tasks. -
19
rspirv
Rust implementation of SPIR-V module processing functionalities
rspirv is a Rust-based parser, builder, and disassembler for SPIR-V, the intermediate binary format used in Vulkan and OpenCL for shaders and compute kernels. It’s part of the gfx-rs ecosystem, a suite of graphics tools aiming to provide cross-platform rendering capabilities in Rust. rspirv enables manipulation and inspection of SPIR-V modules, which is useful in shader compilers, graphics drivers, and development tools for low-level GPU programming. The library strictly follows the SPIR-V... -
20
blavaan
An R package for Bayesian structural equation modeling
blavaan is a free, open-source R package for Bayesian latent variable analysis. It relies on JAGS and Stan to estimate models via MCMC. The blavaan functions and syntax are similar to lavaan. The development version of blavaan (containing updates not yet on CRAN) can be installed via the command provided in the documentation. Compilation is required; this may be a problem for users who currently rely on a binary version of blavaan from CRAN. -
21
Paper Mario
Decompilation of Paper Mario (Nintendo 64)
Paper Mario is an ongoing reverse engineering and decompilation project that aims to reconstruct the original source code of the Nintendo 64 game Paper Mario. The project focuses on producing code that matches the original binary exactly, enabling a deeper understanding of how the game was built. It provides tools, scripts, and documentation to analyze game behavior and structure. Contributors work collaboratively to translate assembly code into readable C while maintaining functional... -
22
Yearning SQL
A most popular sql audit platform for mysql
The MYSQL SQL audit tool used to unpack. Using the compiled binary files, only one database does not rely on any other plug-in to easily deploy. go+vue brings a smooth and beautiful user interface and powerful performance to Yearning. Yearning automatically reviews Mysql's syntax grammar norms based on Mysql grammar analysis and conducts functional audits based on the audit rules implemented by Yearning itself. -
23
Capstone
Capstone disassembly/disassembler framework
Capstone is a disassembly framework with the target of becoming the ultimate disasm engine for binary analysis and reversing in the security community. Created by Nguyen Anh Quynh, then developed and maintained by a small community, Capstone offers some unparalleled features. Support multiple hardware architectures: ARM, ARM64 (ARMv8), Ethereum VM, M68K, Mips, MOS65XX, PPC, Sparc, SystemZ, TMS320C64X, M680X, XCore and X86 (including X86_64). -
24
doctest
Fastest feature-rich C++11/14/17/20 single-header testing framework
doctest is a new C++ testing framework but is by far the fastest both in compile times (by orders of magnitude) and runtime compared to other feature-rich alternatives. It brings the ability of compiled languages such as D / Rust / Nim to have tests written directly in the production code thanks to a fast, transparent and flexible test runner with a clean interface. The framework is and will stay free but needs your support to sustain its development. There are lots of new features and... -
25
pmd
An extensible multilanguage static code analyzer
PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It supports Java, JavaScript, Salesforce.com Apex and Visualforce, PLSQL, Apache Velocity, XML, and XSL. Additionally, it includes CPD, the copy-paste-detector. CPD finds duplicated code in Java, C, C++, C#, Groovy, PHP, Ruby, Fortran, JavaScript, PLSQL, Apache Velocity, Scala, Objective C, Matlab, Python, Go, Swift and Salesforce.com Apex,...
