Axel Tillequin

https://github.com/bdcht/amoco

Amoco is a python package dedicated to the (static) analysis of binaries.
It features:
- a generic framework for decoding instructions, developed to reduce the time needed to implement support for new architectures.
- a symbolic algebra module which allows to describe the semantics of every instructions and compute a functional representation of instruction blocks.
- a generic execution model wich provides an abstract memory model to deal with concrete or symbolic values transparently, and other system-dependent features.
- various classes implementing usual disassembly techniques like linear sweep, recursive traversal, or more elaborated techniques like path-predicate which relies on SAT/SMT solvers to proceed with discovering the control flow graph or even to implement techniques like DARE (Directed Automated Random Exploration).
- various generic "helpers" and arch-dependent pretty printers to allow custom look-and-feel configurations (think AT&T vs. Intel syntax, absolute vs. relative offsets, decimal or hex immediates, etc).

AmocoPlugin
look_for_gadgets_with_equations.py

???

https://github.com/BinaryAnalysisPlatform

https://github.com/BinaryAnalysisPlatform/bap

BAP

BAP is a platform for binary analysis. It is written in OCaml, but can be used from other languages. After BAP and python bindings are properly installed.

QIRA

???

Ivan Fontarensky

http://bitbucket.cassidiancybersecurity.com/disass

Disass is a binary analysis framework written in Python to ease the automation of static malware reverse engineering. The purpose of Disass is to automatically retrieve relevant information in a malware such as the C&C, the user agent, cipher keys, etc.

???

???

Poul-Henning

https://github.com/bsdphk/PyRevEng

Software Reverse Engineering toolkit in python.

???

???

zardus

https://github.com/zardus/pyvex

Valgrind

Python bindings for Valgrind's VEX IR.

Angr
rop_compiler

???

invisigoth kenshoto (@invisig0th)

http://visi.kenshoto.com/viki/MainPage

https://github.com/vivisect/vivisect

Vivisect is programatic binary analysis framework.
Features:
* Simple/fast python API for trying out crazy analysis ideas
* Complete emulation pass with annotation
* Import emulation to allow emu state tracking
* Analysis of Elf/PE/binaryblob formats (Mach-O to come soon)
* Support for easy to implement and batch run analysis module interface
* Support for more than one binary file loaded in one workspace
* Colaborative real-time client/server mode
* Reasonably decent GUI (mostly for viewing) results
* Support for running on windows/linux/mac
* Windows symbol server support (when run on win32)
* Bulk analysis mode which goes nice and fast (w/o GUI)

SocketSniff
Nightmare
FLOSS
flare-dbg

Visipedia
Examples