# HexRays Toolbox

> IDAPython scripts that find code patterns in Hex-Rays decompiler output, independent of the binary's processor architecture, by running user-written lambda queries over the decompiled ctree. Queries run from the hxtb-shell GUI inside IDA, from IDAPython through functions such as find_expr() and find_item(), from interactive command-line helpers or in batch mode over a set of files. The README's use cases include finding vulnerabilities and their variants, locating code patterns from previously reversed executables in newly decompiled code, malware variant analysis and finding patterns across binaries built for different architectures.

- Type: Tool
- Targets: Binary
- Category: Native analysis tools
- Relationship: Foundation tool
- Sources reviewed: 2026-11-05
- Added to the catalog: 2026-11-06
- Original resource: <https://github.com/patois/HexraysToolbox>
- Primary source: <https://github.com/patois/HexraysToolbox/blob/d04869a3d6098a4ae4f60989d455d4bf3e572bad/Readme.md>
- Catalog page: <https://awesomerea.org/resources/hexrays-toolbox/>
- Record JSON: <https://awesomerea.org/resources/hexrays-toolbox/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/resources/hexrays-toolbox/index.md)

## Requirements & limits

- **Prerequisites:** Needs a valid IDA license and a valid Hex-Rays decompiler license for each target architecture. The repository has no releases; the reviewed master commit dates from 2023-06-20.
- **Scope:** Example queries for hxtb-shell are in the hxtbshell_queries folder, and the shell also accepts Python expressions copied from the context viewer of the separate HRDevHelper plugin.
- **License:** CC0-1.0 per LICENSE.

## Primary sources

1. <https://github.com/patois/HexraysToolbox/blob/d04869a3d6098a4ae4f60989d455d4bf3e572bad/Readme.md>
2. <https://github.com/patois/HexraysToolbox/blob/d04869a3d6098a4ae4f60989d455d4bf3e572bad/hxtb.py>
3. <https://github.com/patois/HexraysToolbox/tree/d04869a3d6098a4ae4f60989d455d4bf3e572bad/hxtbshell_queries>
4. <https://github.com/patois/HexraysToolbox/blob/d04869a3d6098a4ae4f60989d455d4bf3e572bad/LICENSE>

## More in Native binaries

- [Virtuailor](https://awesomerea.org/resources/virtuailor/index.md) · Tool
- [xAnalyzer](https://awesomerea.org/resources/xanalyzer/index.md) · Tool
- [Voltron](https://awesomerea.org/resources/voltron/index.md) · Tool
- [Remill](https://awesomerea.org/resources/remill/index.md) · Tool
- [iaito](https://awesomerea.org/resources/iaito/index.md) · Tool
- [HexRaysCodeXplorer](https://awesomerea.org/resources/hexrays-codexplorer/index.md) · Tool

## About this entry

The description was reviewed against primary sources.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.