Zepu1chr3
A Radare2 based Python module for Binary Analysis and Reverse Engineering.
Installation
- You can simply run this command.
pip3 install zepu1chr3
How to Use
Specifying a target binary
- Description: You can specify any binary file to analysis you want. It returns a handler for target file.
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
Getting symbols from target binary
- Description: This method will give you what symbols are inside of the target file. It returns an array of symbol information.
import zepu1chr3
zep = zepu1chr3.Binary()
target zep.File("WannaCry.exe")
symbols = zep.GetSymbols(target)
Getting imports from target binary
- Description: This method will give you what imports are inside of the target file. It returns an array of import information.
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
imports = zep.GetImports(target)
Getting functions from target binary
- Description: This method will give you what functions are inside of the target file. It returns an array of function information.
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
functions = zep.GetFunctions(target)
Getting sections from target binary
- Description: This method will give you what sections are inside of the target file. It returns an array of section information.
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
sections = zep.GetSections(target)
Disassembling functions or somethings contained in offsets
Getting informations about only machine code
- Description: This method will give you disassembled function codes if
only_codesparameter set toTrue
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
disas = zep.DisassembleFunction(target, given_function="entry0", only_codes=True)
second = zep.DisassembleFunction(target, given_function="0x401000", only_codes=True) # You can use offsets to!!
Getting every information about machine code (verbose!!)
- Description: If you set
only_codesparameter asFalseyou will get more verbose output.
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
disas = zep.DisassembleFunction(target, given_function="entry0", only_codes=False)
20 Dec 24, 2022
94 Dec 13, 2022
4 Oct 10, 2022
2 Oct 29, 2022
589 Dec 30, 2022
314 Dec 30, 2022
14 Jun 22, 2022
9 Nov 9, 2022
26 Sep 4, 2022
31 Nov 22, 2022
19 Nov 15, 2022
77 Jan 03, 2023
1 Nov 17, 2021
96 Jan 02, 2023
343 Dec 31, 2022
108 Jan 07, 2023
479 Dec 27, 2022
1 Dec 26, 2021
3 Jun 05, 2022
5 Mar 15, 2022
13 Sep 19, 2021
66 Nov 08, 2022
462 Jan 02, 2023
1 Nov 23, 2021
6 Jun 05, 2022
5 Oct 08, 2022
87 Dec 13, 2022
14 Dec 23, 2022
11 Nov 17, 2022