バイナリ解析ツール (まとめ)

【目次】

★ TT Security Tools により詳細に情報を掲載

バイナリエディタ

security-tools.hatenablog.com

■Windows

◆Stirling 1.31 (2024/08/24 更新)
http://www.vector.co.jp/soft/win95/util/se079072.html
⇒ https://security-tools.hatenablog.com/entry/Stirling

◆FileInsight (McAfee) (2024/08/24 更新)
https://downloadcenter.trellix.com/products/mcafee-avert/fileinsight.msi
https://github.com/nmantani/FileInsight-plugins/blob/master/README.ja.md
⇒ https://security-tools.hatenablog.com/entry/FileInsight

◆Bz 1.9.8 (2024/08/24 更新)
https://gitlab.com/devill.tamachan/binaryeditorbz/

◆FavBinEdit 1.2.7 (2024/08/24 更新)
http://www.vector.co.jp/soft/winnt/util/se504539.html

◆Hex-Editor-Neo (2024/08/24 更新)
https://hhdsoftware.com/free-hex-editor

◆WinHex 21.2 (2024/08/24 更新)
https://www.x-ways.net/winhex/

◆HxD 2.5.0.0 (2024/08/24 更新)
https://mh-nexus.de/en/hxd/
⇒ https://security-tools.hatenablog.com/entry/HxD

ディスアセンブラ

◆Ghidra (まとめ) (2024/08/24 更新)
https://ghidra-sre.org/
⇒ https://malware-log.hatenablog.com/entry/Ghidra

◆IDA Pro (Hex-Rays) (2024/08/24 更新)
https://hex-rays.com/ida-pro/

◆objdump (2024/08/24 更新)

OS組み込み

⇒ https://security-tools.hatenablog.com/entry/Objdump

◆radare2 (2024/08/24 更新)
https://github.com/radareorg/radare2/releases

デコンパイラ

security-tools.hatenablog.com

【実行形式】

■ツール

◆Ghidra (まとめ) (2024/08/24 更新)
https://ghidra-sre.org/
⇒ https://security-tools.hatenablog.com/entry/Ghidra
⇒ https://malware-log.hatenablog.com/entry/Ghidra

◆IDA Pro (Hex-Rays) (2024/08/24 更新)
https://hex-rays.com/ida-pro/
⇒ https://security-tools.hatenablog.com/entry/IDA_Pro

◆snowman 0.1.3
https://github.com/yegord/snowman

◆retdec (IDA Plugin)
https://retdec.com/
https://github.com/avast/retdec-idaplugin

■サービス

◆retdec
https://retdec.com/
https://github.com/avast/retdec

【dotNET】

◆ILSpy 2.0 (2024/08/24 更新)
https://sourceforge.net/projects/sharpdevelop/files/ILSpy/
⇒ https://security-tools.hatenablog.com/entry/ILSpy

◆Dnspy (2024/08/24 更新)
https://github.com/dnSpy/dnSpy
⇒ https://security-tools.hatenablog.com/entry/Dnspy

◆Spices.Net Decompiler 5.17.11.0
https://www.9rays.net/Downloads.aspx?CategoryID=54

◆dotPeek
https://www.jetbrains.com/ja-jp/decompiler/

デバッガー

security-tools.hatenablog.com

■Windows

◆x64dbg (x64dbg)
https://x64dbg.com/#start

◆Ollydbg (Ollydbg)
http://www.ollydbg.de/

◆Immunity Debugger (immunityinc)
https://www.immunityinc.com/products/debugger/

◆WinDBG (Microsoft)

■Linux

GDB: The GNU Project Debugger (Gnu)
https://www.gnu.org/software/gdb/

Peda (longld)
https://github.com/longld/peda

トレースツール

■Windows

◆API Monitor 2.0 alpha r13 (Rohitab.com)
http://www.rohitab.com/

◆tplus32

■Linux

◇共有ライブラリの関数呼び出し

◆ltrace

◇システムコールレベルでの処理

◆strace

難読化解析

◆XORSearch 1.11.2
https://blog.didierstevens.com/programs/xorsearch/
https://didierstevens.com/files/software/XORSearch_V1_11_2.zip

パッカー

◆UPX 4.2.4 (2024/08/24 更新)
https://upx.github.io/
https://github.com/upx/upx/releases/tag/v4.2.4

◆ASPack 2.43 (2024/08/24 更新)
http://www.aspack.com/downloads.html

◆PECompackt
https://bitsum.com/portfolio/pecompact/

◆Dragon UnPACKer
https://ja.osdn.net/projects/sfnet_dragonunpacker/downloads/Dragon%20UnPACKer/Stable%20releases/5.0.0/dup500-setup.exe/

◆RE_dePacker

バイナリ解析

◆angr
https://angr.io/
https://github.com/angr/angr

【関連まとめ記事】

◆全体まとめ

◆ツール (まとめ)
https://malware-log.hatenablog.com/entry/Tools