Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/entysec/hatasm
HatAsm is a powerful assembler and disassembler that provides support for all common architectures.
https://github.com/entysec/hatasm
arm assembler assembler-implementation assembler-x86 assembly assembly-arm assembly-mips assembly-x86 assembly-x86-64 compiler intel mips payload shellcode x86 x86-64
Last synced: about 1 month ago
JSON representation
HatAsm is a powerful assembler and disassembler that provides support for all common architectures.
- Host: GitHub
- URL: https://github.com/entysec/hatasm
- Owner: EntySec
- License: mit
- Created: 2022-01-21T06:52:35.000Z (almost 3 years ago)
- Default Branch: main
- Last Pushed: 2024-08-10T15:24:35.000Z (5 months ago)
- Last Synced: 2024-08-10T16:27:23.798Z (5 months ago)
- Topics: arm, assembler, assembler-implementation, assembler-x86, assembly, assembly-arm, assembly-mips, assembly-x86, assembly-x86-64, compiler, intel, mips, payload, shellcode, x86, x86-64
- Language: Python
- Homepage: https://entysec.com
- Size: 336 KB
- Stars: 14
- Watchers: 1
- Forks: 3
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
Awesome Lists containing this project
README
[](https://entysec.com)
[](https://github.com/EntySec/HatAsm)
[](https://github.com/EntySec/HatAsm/forks)
[](https://github.com/EntySec/HatAsm/stargazers)
[](https://www.codefactor.io/repository/github/EntySec/HatAsm)
HatAsm is a powerful assembler and disassembler that provides support for all common architectures.
## Features
* Assembler and disassembler both available in one tool.
* Support for most common architectures (e.g **x64**, **x86**, **aarch64**, **armle**, **mipsle**, **mipsbe**, etc).
* Ability to assemble code right into the byte code or pack into an executable (e.g. **ELF**, **Mach-O**, **PE**).
## Installation
```shell
pip3 install git+https://github.com/EntySec/HatAsm
```
## Examples
### Assemble
```python3
from hatasm import HatAsm
hatasm = HatAsm()
code = """
start:
mov al, 0xa2
syscall
mov al, 0xa9
mov edx, 0x1234567
mov esi, 0x28121969
mov edi, 0xfee1dead
syscall
"""
result = hatasm.assemble('x64', code)
for line in hatasm.hexdump(result):
print(line)
```
Result
00000000 b0 a2 0f 05 b0 a9 ba 67 45 23 01 be 69 19 12 28 |.......gE#..i..(|
00000010 bf ad de e1 fe 0f 05 |....... |
## Disassemble
```python3
from hatasm import HatAsm
hatasm = HatAsm()
code = (
b"\xb0\xa2\x0f\x05\xb0\xa9\xba\x67\x45\x23\x01\xbe"
b"\x69\x19\x12\x28\xbf\xad\xde\xe1\xfe\x0f\x05"
)
for line in hatasm.disassemble('x64', code):
print(line.mnemonic, line.op_str)
```
Result
mov al, 0a2h
syscall
mov al, 0a9h
mov edx, 1234567h
mov esi, 28121969h
mov edi, 0fee1deadh
syscall
## HatAsm CLI
HatAsm also has its own command line interface that can be invoked by executing `hatasm` command:
```
usage: hatasm [-h] [--arch ARCH] [--mode MODE] [--syntax SYNTAX] [-i INPUT]
[-o OUTPUT] [-a] [-d] [-e] [-f FORMAT] [--formats]
HatAsm is a powerful assembler and disassembler that provides support for all
common architectures.
options:
-h, --help show this help message and exit
--arch ARCH Architecture to assemble or disassemble for.
--mode MODE Architecture mode (for example - arm/thumb).
--syntax SYNTAX Assembler/Disassembler syntax (for example -
intel/att).
-i INPUT, --input INPUT
Input file for assembler or disassembler.
-o OUTPUT, --output OUTPUT
Output file to write output.
-a, --assemble Launch HatAsm assembler.
-d, --disassemble Launch HatAsm disassembler.
-e, --emulate Emulate assembled code (use with -a).
-f FORMAT, --format FORMAT
Output file format (e.g. elf, macho, pe).
--formats Display all available formats.
```
### Examples
```
hatasm -a --arch x64
```
Run interactive assembler shell for **x64** architecture.
```
hatasm % nop
00000000 90 |. |
hatasm % start:
........ xor rax, rax
........ cdq
........ nop
........
00000000 48 31 c0 99 90 |H1... |
hatasm %
```
Write macOS **x64** execve() /bin/sh shellcode from command-line.
```
hatasm % start:
........ xor rax, rax
........ cdq
........ push rax
........ mov rdi, 0x68732f6e69622f2f
........ push rdi
........ push rsp
........ pop rdi
........ xor rsi, rsi
........ mov al, 0x2
........ ror rax, 0x28
........ mov al, 0x3b
........ syscall
........
00000000 48 31 c0 99 50 48 bf 2f 2f 62 69 6e 2f 73 68 57 |H1..PH.//bin/shW|
00000010 54 5f 48 31 f6 b0 02 48 c1 c8 28 b0 3b 0f 05 |T_H1...H..(.;.. |
hatasm %
```