https://github.com/cyb3rmx/zepu1chr3
A Radare2 based Python module for Binary Analysis and Reverse Engineering.
https://github.com/cyb3rmx/zepu1chr3
binary binary-analysis development malware-analysis python r2pipe radare2 reverse-engineering
Last synced: 11 months ago
JSON representation
A Radare2 based Python module for Binary Analysis and Reverse Engineering.
- Host: GitHub
- URL: https://github.com/cyb3rmx/zepu1chr3
- Owner: CYB3RMX
- License: apache-2.0
- Created: 2022-02-06T18:51:59.000Z (over 4 years ago)
- Default Branch: main
- Last Pushed: 2022-02-07T09:05:41.000Z (over 4 years ago)
- Last Synced: 2024-11-09T08:42:48.718Z (over 1 year ago)
- Topics: binary, binary-analysis, development, malware-analysis, python, r2pipe, radare2, reverse-engineering
- Language: Python
- Homepage:
- Size: 569 KB
- Stars: 7
- Watchers: 2
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Zepu1chr3
A Radare2 based Python module for Binary Analysis and Reverse Engineering.
# Installation
- You can simply run this command.
```bash
pip3 install zepu1chr3
```
# How to Use
## Specifying a target binary
- Description: You can specify any binary file to analysis you want. It returns a handler for target file.
```python
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
```
## Getting symbols from target binary
- Description: This method will give you what symbols are inside of the target file. It returns an array of symbol information.
```python
import zepu1chr3
zep = zepu1chr3.Binary()
target zep.File("WannaCry.exe")
symbols = zep.GetSymbols(target)
```
## Getting imports from target binary
- Description: This method will give you what imports are inside of the target file. It returns an array of import information.
```python
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
imports = zep.GetImports(target)
```
## Getting functions from target binary
- Description: This method will give you what functions are inside of the target file. It returns an array of function information.
```python
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
functions = zep.GetFunctions(target)
```
## Getting sections from target binary
- Description: This method will give you what sections are inside of the target file. It returns an array of section information.
```python
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
sections = zep.GetSections(target)
```
# Disassembling functions or somethings contained in offsets
## Getting informations about only machine code
- Description: This method will give you disassembled function codes if ```only_codes``` parameter set to ```True```
```python
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
disas = zep.DisassembleFunction(target, given_function="entry0", only_codes=True)
second = zep.DisassembleFunction(target, given_function="0x401000", only_codes=True) # You can use offsets to!!
```
## Getting every information about machine code (verbose!!)
- Description: If you set ```only_codes``` parameter as ```False``` you will get more verbose output.
```python
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
disas = zep.DisassembleFunction(target, given_function="entry0", only_codes=False)
```
# Other functionalities are coming soon!!