Zepu1chr3
A Radare2 based Python module for Binary Analysis and Reverse Engineering.
Installation
- You can simply run this command.
pip3 install zepu1chr3
How to Use
Specifying a target binary
- Description: You can specify any binary file to analysis you want. It returns a handler for target file.
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
Getting symbols from target binary
- Description: This method will give you what symbols are inside of the target file. It returns an array of symbol information.
import zepu1chr3
zep = zepu1chr3.Binary()
target zep.File("WannaCry.exe")
symbols = zep.GetSymbols(target)
Getting imports from target binary
- Description: This method will give you what imports are inside of the target file. It returns an array of import information.
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
imports = zep.GetImports(target)
Getting functions from target binary
- Description: This method will give you what functions are inside of the target file. It returns an array of function information.
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
functions = zep.GetFunctions(target)
Getting sections from target binary
- Description: This method will give you what sections are inside of the target file. It returns an array of section information.
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
sections = zep.GetSections(target)
Disassembling functions or somethings contained in offsets
Getting informations about only machine code
- Description: This method will give you disassembled function codes if
only_codesparameter set toTrue
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
disas = zep.DisassembleFunction(target, given_function="entry0", only_codes=True)
second = zep.DisassembleFunction(target, given_function="0x401000", only_codes=True) # You can use offsets to!!
Getting every information about machine code (verbose!!)
- Description: If you set
only_codesparameter asFalseyou will get more verbose output.
import zepu1chr3
zep = zepu1chr3.Binary()
target = zep.File("WannaCry.exe")
disas = zep.DisassembleFunction(target, given_function="entry0", only_codes=False)
20 Dec 24, 2022
94 Dec 13, 2022
4 Oct 10, 2022
2 Oct 29, 2022
589 Dec 30, 2022
314 Dec 30, 2022
14 Jun 22, 2022
9 Nov 9, 2022
26 Sep 4, 2022
31 Oct 21, 2022
168 Nov 09, 2022
1 Jan 10, 2022
199 Jan 04, 2023
9 Jul 04, 2022
11 Sep 04, 2022
80 Dec 21, 2022
39 Nov 28, 2022
16 Dec 30, 2022
26 Jan 01, 2023
25 Dec 06, 2022
5 Nov 23, 2021
534 Dec 14, 2022
3 Oct 18, 2022
1 Nov 28, 2021
206 Dec 31, 2022
46 Oct 30, 2022
10 Nov 23, 2022
98 Dec 26, 2022
12 Nov 09, 2022