# BinaryAudit

> BinaryAudit is a benchmark of AI agents looking for backdoors in compiled binaries of open-source software. Agents receive stripped binaries and Ghidra or Radare2 inside Docker. The task set covers lighttpd, dnsmasq, Dropbear, Sozu, and Caddy, including clean binaries and timebomb tasks. The README says the backdoors were artificially injected.

- Type: Project
- Targets: Binary
- Category: Native analysis tools
- Relationship: Foundation tool
- Sources reviewed: 2026-11-07
- Added to the catalog: 2026-11-09
- Original resource: <https://github.com/QuesmaOrg/BinaryAudit>
- Primary source: <https://github.com/QuesmaOrg/BinaryAudit/blob/175b7ec1a39b7ba1545ae008a9e93106348c3b4e/README.md>
- Catalog page: <https://awesomerea.org/resources/binaryaudit/>
- Record JSON: <https://awesomerea.org/resources/binaryaudit/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/resources/binaryaudit/index.md)

## Requirements & limits

- Harbor, installed with uv tool install harbor, plus Docker and an API key for the chosen model.
- Before Docker tasks, build the image binaryaudit-base:latest from docker/base.Dockerfile.
- License: Apache 2.0.

## Primary sources

1. <https://github.com/QuesmaOrg/BinaryAudit/blob/175b7ec1a39b7ba1545ae008a9e93106348c3b4e/README.md>

## More in Native binaries

- [Zomboid Decompiler](https://awesomerea.org/resources/zomboid-decompiler/index.md) · Tool
- [Ghidra Wasm Plugin](https://awesomerea.org/resources/ghidra-wasm-plugin/index.md) · Tool
- [dx-shader-decompiler](https://awesomerea.org/resources/dx-shader-decompiler/index.md) · Tool
- [agsutils](https://awesomerea.org/resources/agsutils/index.md) · Tool
- [ExtractMachO](https://awesomerea.org/resources/extractmacho/index.md) · Tool
- [waterbear](https://awesomerea.org/resources/waterbear/index.md) · Tool

## About this entry

The description was reviewed against primary sources.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.