Binary Analysis Python Packages

lief

LIEF - Library to Instrument Executable Formats (C++, Python, Rust)

1.8M 5K 726

manticore

Symbolic execution tool

96K 4K 493

flare-capa

The FLARE team's open-source tool to identify capabilities in executable files.

77K 6K 698

nampa

Nampa - FLIRT for (binary) ninjas

24K 100 17

aboutcode-pipeline

ScanCode.io is a server to script and automate software composition analysis with pipelines. This project is sponsored by the European Commission, NLnet NGI0, the Google Summer of Code, nexB and others generous sponsors!

8K 201 191

fritap

Simplifies (SSL/TLS) traffic analysis and key extraction using Frida across major platforms.

6K 496 46

bids-analyser

BIDS (Binary Identification of Dependencies with Search). The BIDS project will deliver tooling to analyse ELF binaries and extract key features and store these for indexing and searching using an inverted index. This project is sponsored by NLNET https://nlnet.nl/project/BIDS/.

4K 6 2

triton-library

Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.

3K 4K 581

scancodeio

3K 201 191

ida-pro-mcp

AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.

3K 8K 991

gtirb

Intermediate Representation for Binary analysis and transformation

3K 357 38

sigmaker

sigmaker is a zero-dependency IDA Pro 9.0+ cross-platform signature maker plugin with optional SIMD (e.g. AVX2/NEON/SSE2) speedups that works on MacOS/Linux/Windows. It allows configurable wildcard operand patterns, nibbles, and signature generation just by right clicking.

2K 174 13

bintropy

Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes

1K 49 4

peid

Python implementation of the Packed Executable iDentifier (PEiD)

1K 144 15

gtirb-pprinter

Pretty printer from GTIRB to assembly code

1K 50 12

reait

RevEng.AI Toolkit and Python API

1K 33 5

ddisasm

A fast and accurate disassembler

1K 748 68

reminder-detector

Implementation of the packing detection heuristic from the paper "Packed PE File Detection for Malware Forensics" of Han et al.

993 2 0

pypackerdetect

Packing detection tool for PE files

986 28 4

flatline

Python wrapper around the Ghidra decompiler

905 0 0

avatar2

Python core of avatar²

887 570 106

systrack

📡🐧 Linux kernel syscall implementation tracker

844 271 19

openremap

ECU binary analysis and patching toolkit — diff, validate, and apply tuning recipes to automotive ECU binaries.

735 4 0

pybinwalk

Python bindings for Binwalk v3, built with PyO3 and maturin.

497 1 0