https://github.com/sandialabs/oxide
Flexible, modular, distributed framework for performing analysis of executable code. Forked to https://github.com/Program-Understanding/oxide
https://github.com/sandialabs/oxide
scr-1657 snl-applications snl-cyber-sec snl-data-analysis
Last synced: 12 months ago
JSON representation
Flexible, modular, distributed framework for performing analysis of executable code. Forked to https://github.com/Program-Understanding/oxide
- Host: GitHub
- URL: https://github.com/sandialabs/oxide
- Owner: sandialabs
- Created: 2023-06-11T06:56:31.000Z (about 3 years ago)
- Default Branch: main
- Last Pushed: 2023-06-11T08:08:16.000Z (about 3 years ago)
- Last Synced: 2025-03-01T00:26:01.333Z (over 1 year ago)
- Topics: scr-1657, snl-applications, snl-cyber-sec, snl-data-analysis
- Language: Python
- Homepage:
- Size: 500 KB
- Stars: 2
- Watchers: 2
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
Oxide is a flexible, modular, distributed framework for performing analysis of
executable code. It separates the user interface components from the storage
components and from the analysis components. The system is designed such that a
module writer who is a domain expert in the specific area of the module does not
need much knowledge of the rest of the system. The same modules work no matter
how or where the data is stored or what sort of interface the user is seeing.
# Decoders
## How to get Capstone to work
Capstone is an open-source, multi-platform, multi-architecture decoder.
Installation is accomplished through pip
```
pip install capstone
```
## How to get XED to work
XED is intel's reference x86 instruction decoder.
XED has python bindings mantained here:
* https://github.com/huku-/pyxed
```
python3 setup.py build
python3 setup.py install
python3
>>> import pyxed
```
# Disassemblers
## How to get Ghidra to work
Ghidra is an open-source software RE tool designed to disassemble many different architectures and extensible through tweaking or creating sleigh files that define ABI of architecture.
https://github.com/NationalSecurityAgency/ghidra/releases
Ghidra runs in Java and requires Java JDK 11, *https://jdk.java.net/*
## How to get IDA to work
IDAPro is one of the most prevalent disassemblers, with the Hex-Rays decompilers on the
market. Once purchased the IDAPATH must be set in the configuration file.
## How to get Radare2
Radare is a command line software reverse engineering tool, with capstone backend.
Installation is accomplished through running install script from within the radare directory. Furthermore, a python interface is required.
* https://github.com/radareorg/radare2
```
./sys/install.sh
pip3 install r2pipe
```
## How to get Pharos to work
Pharos is a front end for the ROSE Compiler, from Lawrence Livermore National Labratory,
which configures the callbacks to get information out. Pharos is a suite of utilities
built on this such as disassembly and OOAnalyzer.
Assuming docker is configured and installed. The easiest interface is the pre-built docker image.
```
docker pull seipharos/pharos
```
....
## How to get angr to work
angr is a symbolic execution and program analysis open source project from UCSB under Vigna and Kruegel.
```
pip3 install angr
```
## How to get Binary Ninja to work
Binary Ninja is an interactive disassembler, decompiler, and reverse engineering platform created by Vector35 (former Raytheon/SI Gov).
This requires a commercial license or headless license of binary ninja.
```
python3 /scripts/install_api.py
```
# Miscellaneous Packages in Modules/Plugins
pip3 install
* Termcolor
* Networkx
....