PyRank

Binary Analysis Python Packages

Python packages with the GitHub topic binary-analysis. Sorted by relevance, with stars and monthly downloads.
lief-project
lief

LIEF - Library to Instrument Executable Formats (C++, Python, Rust)

1.8M 5K 737
kenoph
nampa

Nampa - FLIRT for (binary) ninjas

101K 99 17
mandiant
flare-capa

The FLARE team's open-source tool to identify capabilities in executable files.

61K 6K 706
trailofbits
manticore

Symbolic execution tool

17K 4K 500
mahmoudimus
sigmaker

sigmaker is a zero-dependency IDA Pro 9.0+ cross-platform signature maker plugin with optional SIMD (e.g. AVX2/NEON/SSE2) speedups that works on MacOS/Linux/Windows. It allows configurable wildcard operand patterns, nibbles, and signature generation just by right clicking.

11K 190 12
aboutcode-org
aboutcode-pipeline

ScanCode.io is a server to script and automate software composition analysis with pipelines. This project is sponsored by the European Commission, NLnet NGI0, the Google Summer of Code, nexB and others generous sponsors!

10K 205 192
fkie-cad
fritap

Simplifying encrypted traffic analysis for researchers by making protocol decryption effortless.

8K 524 48
mrexodia
ida-pro-mcp

AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.

7K 10K 1K
jonathansalwan
triton-library

Triton is a dynamic binary analysis library. Build your own program analysis tools, automate your reverse engineering, perform software verification or just emulate code.

6K 4K 588
aph10
bids-analyser

BIDS (Binary Identification of Dependencies with Search). The BIDS project will deliver tooling to analyse ELF binaries and extract key features and store these for indexing and searching using an inverted index. This project is sponsored by NLNET https://nlnet.nl/project/BIDS/.

3K 6 2
aboutcode-org
scancodeio

ScanCode.io is a server to script and automate software composition analysis with pipelines. This project is sponsored by the European Commission, NLnet NGI0, the Google Summer of Code, nexB and others generous sponsors!

2K 205 192
grammatech
gtirb

Intermediate Representation for Binary analysis and transformation

2K 359 39
nightwing-us
mcpyghidra

MCP server exposing Ghidra reverse-engineering tools to LLM clients.

2K 2 0
nightwing-us
mcpyida

MCP server exposing IDA reverse-engineering tools to LLM clients.

2K 4 0
deglyph-re
deglyph

A terminal tool for reading native binaries, also scans for secrets and CVEs in CI.

2K 0 0
avatartwo
avatar2

Python core of avatar²

1K 574 109
v-arapidis
openremap

Open-source ECU binary identification, diffing, and patching toolkit. Free alternative to the identification and binary-diff workflows locked inside WinOLS, ECM Titanium, and similar commercial tools.

952 15 0
packing-box
reminder-detector

Implementation of the packing detection heuristic from the paper "Packed PE File Detection for Malware Forensics" of Han et al.

879 2 0
grammatech
ddisasm

A fast and accurate disassembler

874 750 69
xodnr927-byte
repro-evidence-kit

Reproducible artifact manifests, sandbox-output verification, and evidence-bundle validation for artifact-heavy workflows.

845 14 0
packing-box
bintropy

Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes

832 50 4
packing-box
peid

Python implementation of the Packed Executable iDentifier (PEiD)

760 147 15
grammatech
gtirb-pprinter

Pretty printer from GTIRB to assembly code

732 50 13
MrEx-Right
exploitlab

A modern, lightweight, and robust exploit development library for CTFs and vulnerability research.

674 1 0