Zepu1chr3
A Radare2 based Python module for Binary Analysis and Reverse Engineering.
Installation
- You can simply run this command.
pip3 install zepu1chr3
How to Use
Specifying a target binary
- Description: You can specify any binary file to analysis you want. It returns a handler for target file.
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
Getting symbols from target binary
- Description: This method will give you what symbols are inside of the target file. It returns an array of symbol information.
import zepu1chr3
zep = zepu1chr3.Binary()
target zep.File("WannaCry.exe")
symbols = zep.GetSymbols(target)
Getting imports from target binary
- Description: This method will give you what imports are inside of the target file. It returns an array of import information.
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
imports = zep.GetImports(target)
Getting functions from target binary
- Description: This method will give you what functions are inside of the target file. It returns an array of function information.
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
functions = zep.GetFunctions(target)
Getting sections from target binary
- Description: This method will give you what sections are inside of the target file. It returns an array of section information.
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
sections = zep.GetSections(target)
Disassembling functions or somethings contained in offsets
Getting informations about only machine code
- Description: This method will give you disassembled function codes if
only_codesparameter set toTrue
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
disas = zep.DisassembleFunction(target, given_function="entry0", only_codes=True)
second = zep.DisassembleFunction(target, given_function="0x401000", only_codes=True) # You can use offsets to!!
Getting every information about machine code (verbose!!)
- Description: If you set
only_codesparameter asFalseyou will get more verbose output.
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
disas = zep.DisassembleFunction(target, given_function="entry0", only_codes=False)
20 Dec 24, 2022
94 Dec 13, 2022
4 Oct 10, 2022
2 Oct 29, 2022
589 Dec 30, 2022
314 Dec 30, 2022
14 Jun 22, 2022
9 Nov 9, 2022
26 Sep 4, 2022
2 Nov 16, 2021
87 Dec 31, 2022
2.1k Jan 08, 2023
5 Nov 09, 2022
9 May 01, 2022
73 Jan 01, 2023
1 May 06, 2022
2 Feb 12, 2022
1 Jan 10, 2022
1 Jan 11, 2022
5 Nov 23, 2021
11 Sep 10, 2022
112 Dec 01, 2022
2 Feb 05, 2022
14 Nov 11, 2022
4 Oct 24, 2022
7 Sep 16, 2022
5.8k Jan 07, 2023
12 Nov 09, 2022
63 Dec 30, 2022