Zepu1chr3
A Radare2 based Python module for Binary Analysis and Reverse Engineering.
Installation
- You can simply run this command.
pip3 install zepu1chr3
How to Use
Specifying a target binary
- Description: You can specify any binary file to analysis you want. It returns a handler for target file.
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
Getting symbols from target binary
- Description: This method will give you what symbols are inside of the target file. It returns an array of symbol information.
import zepu1chr3
zep = zepu1chr3.Binary()
target zep.File("WannaCry.exe")
symbols = zep.GetSymbols(target)
Getting imports from target binary
- Description: This method will give you what imports are inside of the target file. It returns an array of import information.
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
imports = zep.GetImports(target)
Getting functions from target binary
- Description: This method will give you what functions are inside of the target file. It returns an array of function information.
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
functions = zep.GetFunctions(target)
Getting sections from target binary
- Description: This method will give you what sections are inside of the target file. It returns an array of section information.
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
sections = zep.GetSections(target)
Disassembling functions or somethings contained in offsets
Getting informations about only machine code
- Description: This method will give you disassembled function codes if
only_codesparameter set toTrue
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
disas = zep.DisassembleFunction(target, given_function="entry0", only_codes=True)
second = zep.DisassembleFunction(target, given_function="0x401000", only_codes=True) # You can use offsets to!!
Getting every information about machine code (verbose!!)
- Description: If you set
only_codesparameter asFalseyou will get more verbose output.
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
disas = zep.DisassembleFunction(target, given_function="entry0", only_codes=False)
20 Dec 24, 2022
94 Dec 13, 2022
4 Oct 10, 2022
2 Oct 29, 2022
589 Dec 30, 2022
314 Dec 30, 2022
14 Jun 22, 2022
9 Nov 9, 2022
26 Sep 4, 2022
72 Jan 01, 2023
45 Dec 11, 2022
191 Dec 22, 2022
80 Dec 21, 2022
2 Jul 26, 2022
16 Dec 18, 2022
11 Aug 27, 2022
84 Sep 09, 2022
66 Dec 08, 2022
1.5k Dec 28, 2022
52 Jul 16, 2022
9 Jun 20, 2022
34 Dec 01, 2022
24 Nov 09, 2022
1 Dec 11, 2021
9.8k Dec 31, 2022
9 May 01, 2022
3 Dec 13, 2021
57 Dec 16, 2022
212 Dec 24, 2022