radare2
LIEF
Our great sponsors
| radare2 | LIEF | |
|---|---|---|
| 9 | 4 | |
| 19,558 | 4,127 | |
| 1.2% | 1.9% | |
| 9.9 | 9.4 | |
| 4 days ago | 11 days ago | |
| C | C++ | |
| GNU Lesser General Public License v3.0 only | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
radare2
-
I'm pretty sure this is possible, and would appreciate confirmation/direction.
https://github.com/radareorg/radare2 (You can git clone it, then run the install script)
- Introducing YaRadare - YARA scanning for cloud-native apps (containers)
-
reverse engineering/de-compiling (with radare2/r2)
Has any one had an luck reverse engineering Pebble binaries? Whilst I've had success editing js code in existing applications I've not had any luck with C code. This is not an area I have a lot of experience but it looks like the disassembly support in radare2 might not be complete. I've opened a ticket https://github.com/radareorg/radare2/issues/20002 but thought it worth posting here to see what experiences people had.
- rabin2 for scraping ELF to JSON
-
That took a wild turn
True story: there is a project called Radare2 (or r2) which recently has been forked as Rizin. The reasons for the fork were many, but one of the things they changed was renaming occurrences in code of words like "anal", "sex", etc.
LIEF
-
What's the Most Portable Way to Include Binary Blobs in an Executable?
My team is working on this problem in the context of creating Node.js single-executable applications. While the naive approach of just appending data at the end of the binary works, it is not friendly with code-signature in macOS and Windows given that signing operates on PE and Mach-O sections.
We have recently open-sourced a small tool called Postject (https://github.com/postmanlabs/postject), which is able to inject arbitrary data as proper ELF/Mach-O/PE sections for all major operating systems (with AIX support coming). The tool also provides C/C++ cross-platform headers for easily traversing the final binary and introspect whether the segment is present or not.
The tool is based on the LIEF (https://github.com/lief-project/LIEF) project.
At Postman, we are making use of this on our custom Node.js single-executable applications and soon on our custom Electron.js builds too.
-
Pefile python module features
https://github.com/lief-project/LIEF https://lief-project.github.io/doc/latest/api/python/index.html
-
Collection of tools for executable packing detection
Bintropy: Entropy-based packing detection featuring multiple modes (whole binary, per section or segment). Based on the awesome LIEF library, therefore supports ELF, PE, Mach-O.
-
rabin2 for scraping ELF to JSON
I've been looking at LIEF toolkit for similar purposes (https://github.com/lief-project/LIEF). It's a python framework for cross platform binary analysis. I'm curious, does rabin2 support dll format?
What are some alternatives?
rizin - UNIX-like reverse engineering framework and command-line toolset.
dll-proxy-generator - Creates a proxy dll which sits between the game and original dll
Il2CppInspector - Powerful automated tool for reverse engineering Unity IL2CPP binaries
flare-vm - A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.
capstone - Capstone disassembly/disassembler framework: Core (Arm, Arm64, BPF, EVM, M68K, M680X, MOS65xx, Mips, PPC, RISCV, Sparc, SystemZ, TMS320C64x, Web Assembly, X86, X86_64, XCore) + bindings. [Moved to: https://github.com/capstone-engine/capstone]
ret-sync - ret-sync is a set of plugins that helps to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg2/x64dbg) with IDA/Ghidra/Binary Ninja disassemblers.
zydis - Fast and lightweight x86/x86-64 disassembler and code generation library
0x02-ARM-32-Hacking-Int - ARM 32-bit Raspberry Pi Hacking Int example in Kali Linux.
Detect-It-Easy - Program for determining types of files for Windows, Linux and MacOS.
Binance-APK-Analysis - Revealing secrets behind Binance Crypto Exchange platform through Android APK Analysis
tree-sitter-html - HTML grammar for Tree-sitter
SciPy - SciPy library main repository