Top 15 Python binary-analysis Projects

capa

1 2 5,487 9.5 Python

The FLARE team's open-source tool to identify capabilities in executable files.
Sevalla

sevalla.com featured

Deploy and host your apps and databases, now with $50 credit! Sevalla is the PaaS you have been looking for! Advanced deployment pipelines, usage-based pricing, preview apps, templates, human support by developers, and much more!
manticore

2 5 3,767 3.8 Python

Symbolic execution tool
firmware-analysis-toolkit

3 1 1,487 3.1 Python

Toolkit to emulate firmware and analyse it for security vulnerabilities
avatar2

4 1 555 1.5 Python

Python core of avatar²
hexabyte

5 2 278 7.6 Python

A modern, modular, and robust TUI hex editor.
systrack

6 1 223 8.2 Python

📡🐧 Linux kernel syscall implementation tracker
dewolf

7 1 196 3.4 Python

A research decompiler implemented as a Binary Ninja plugin.
InfluxDB

www.influxdata.com featured

InfluxDB – Built for High-Performance Time Series Workloads. InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
peid

8 1 139 5.0 Python

Python implementation of the Packed Executable iDentifier (PEiD)
SEMA

9 2 117 7.7 Python

SEMA is based on angr, a symbolic execution engine used to extract API calls. Especially, we extend ANGR with strategies to create representative signatures based on System Call Dependency graph (SCDG). Those SCDGs can be exploited in machine learning modules to do classification/detection. (by csvl)
Nyxelf

10 2 108 6.9 Python

Nyxelf is a highly effective tool tailored for analyzing malicious Linux ELF binaries, offering comprehensive support for both static and dynamic analysis techniques.

Project mention: This Week In Python | dev.to | 2025-02-07

Nyxelf – highly effective tool tailored for analyzing malicious Linux ELF binaries
docker-packing-box

11 1 60 9.0 Python

Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection
bintropy

12 1 47 3.2 Python

Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes
PCDump-bn

13 2 39 10.0 Python

This Binary Ninja plugin is written in Python 3 and it aims to assist with reverse engineering and vulnerability research. It dumps the Pseudo C representation of a binary, generated by Binja's decompiler, into a specified folder.
pypackerdetect

14 1 25 2.8 Python

Packing detection tool for PE files
windbg-code-tracing

15 1 8 10.0 Python

Pykd script to perform simple code tracing and so inspecting control flow executed (CFE).
SaaSHub

www.saashub.com featured

SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).

Python binary-analysis discussion

Python binary-analysis related posts

This Week In Python

6 projects | dev.to | 7 Feb 2025
What is Manticore?

1 project | /r/smartcontractaudits | 26 May 2022
Any standard algorithms for parsing (disassembling) machine code?

3 projects | /r/compsci | 13 May 2022
Collection of tools for executable packing detection

6 projects | /r/Malware | 15 Jan 2022

Index

What are some of the best open-source binary-analysis projects in Python? This list will help you:

#	Project	Stars
1	capa	5,487
2	manticore	3,767
3	firmware-analysis-toolkit	1,487
4	avatar2	555
5	hexabyte	278
6	systrack	223
7	dewolf	196
8	peid	139
9	SEMA	117
10	Nyxelf	108
11	docker-packing-box	60
12	bintropy	47
13	PCDump-bn	39
14	pypackerdetect	25
15	windbg-code-tracing	8