{
  "added_at": "2026-11-09",
  "category": "native-analysis",
  "description_en": "BinaryAudit is a benchmark of AI agents looking for backdoors in compiled binaries of open-source software. Agents receive stripped binaries and Ghidra or Radare2 inside Docker. The task set covers lighttpd, dnsmasq, Dropbear, Sozu, and Caddy, including clean binaries and timebomb tasks. The README says the backdoors were artificially injected.",
  "description_zh": "BinaryAudit 是一个基准，用来评估 AI 代理在开源软件的编译二进制中查找后门的能力。代理在 Docker 里拿到去掉符号的二进制，以及 Ghidra 或 Radare2。任务覆盖 lighttpd、dnsmasq、Dropbear、Sozu 和 Caddy，包括干净二进制和时间炸弹任务。README 写明这些后门是人工注入的。",
  "entry_url": "https://awesomerea.org/resources/binaryaudit/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/binaryaudit/",
  "evidence_url": "https://github.com/QuesmaOrg/BinaryAudit/blob/175b7ec1a39b7ba1545ae008a9e93106348c3b4e/README.md",
  "group": "tools",
  "id": "binaryaudit",
  "json_url": "https://awesomerea.org/resources/binaryaudit/record.json",
  "kind": "project",
  "markdown_url": "https://awesomerea.org/resources/binaryaudit/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/binaryaudit/index.md",
  "name": "BinaryAudit",
  "name_zh": "BinaryAudit",
  "record_type": "resource",
  "relationship": "foundation",
  "requirements": [
    "Harbor, installed with uv tool install harbor, plus Docker and an API key for the chosen model.",
    "Before Docker tasks, build the image binaryaudit-base:latest from docker/base.Dockerfile.",
    "License: Apache 2.0."
  ],
  "requirements_zh": [
    "需要 Harbor（用 uv tool install harbor 安装）、Docker，以及所选模型的 API 密钥。",
    "运行 Docker 任务前，用 docker/base.Dockerfile 构建镜像 binaryaudit-base:latest。",
    "许可证：Apache 2.0。"
  ],
  "targets": [
    "binary"
  ],
  "url": "https://github.com/QuesmaOrg/BinaryAudit",
  "verification": "source-reviewed",
  "verified_at": "2026-11-07"
}