Zepu1chr3
A Radare2 based Python module for Binary Analysis and Reverse Engineering.
Installation
- You can simply run this command.
pip3 install zepu1chr3
How to Use
Specifying a target binary
- Description: You can specify any binary file to analysis you want. It returns a handler for target file.
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
Getting symbols from target binary
- Description: This method will give you what symbols are inside of the target file. It returns an array of symbol information.
import zepu1chr3
zep = zepu1chr3.Binary()
target zep.File("WannaCry.exe")
symbols = zep.GetSymbols(target)
Getting imports from target binary
- Description: This method will give you what imports are inside of the target file. It returns an array of import information.
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
imports = zep.GetImports(target)
Getting functions from target binary
- Description: This method will give you what functions are inside of the target file. It returns an array of function information.
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
functions = zep.GetFunctions(target)
Getting sections from target binary
- Description: This method will give you what sections are inside of the target file. It returns an array of section information.
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
sections = zep.GetSections(target)
Disassembling functions or somethings contained in offsets
Getting informations about only machine code
- Description: This method will give you disassembled function codes if
only_codesparameter set toTrue
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
disas = zep.DisassembleFunction(target, given_function="entry0", only_codes=True)
second = zep.DisassembleFunction(target, given_function="0x401000", only_codes=True) # You can use offsets to!!
Getting every information about machine code (verbose!!)
- Description: If you set
only_codesparameter asFalseyou will get more verbose output.
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
disas = zep.DisassembleFunction(target, given_function="entry0", only_codes=False)
20 Dec 24, 2022
94 Dec 13, 2022
4 Oct 10, 2022
2 Oct 29, 2022
589 Dec 30, 2022
314 Dec 30, 2022
14 Jun 22, 2022
9 Nov 9, 2022
26 Sep 4, 2022
1 Feb 14, 2022
3 Nov 08, 2022
129 Dec 21, 2022
63 Dec 30, 2022
15 Feb 21, 2022
76 Nov 30, 2022
2 Feb 09, 2022
6 Dec 09, 2022
5 Dec 03, 2022
896 Dec 19, 2022
13 Oct 28, 2022
312 Dec 09, 2022
820 Dec 18, 2022
1 Jan 10, 2022
1 Dec 25, 2021
38 Dec 31, 2022
2 Nov 16, 2021
10 Dec 28, 2021
384 Dec 23, 2022
8 Feb 24, 2022