Tool

Vivisect

Pure-Python reverse-engineering framework that combines the vivisect static analyzer, the vtrace debugging library and the vdb debugger. Vivisect loads PE, ELF, Mach-O, Intel HEX, S-record and raw blob files into workspaces, disassembles and emulates code through envi architecture modules for x86, AMD64, ARM, Thumb, AArch64, MSP430, H8 and Z80, and adds symbolic execution, a Qt GUI and a remote workspace server. vtrace drives processes on Windows, Linux, FreeBSD, macOS and Solaris and has GDB-stub and VMware backends.

Targets
Binary · Firmware
Category
Native analysis tools
Relationship
Foundation tool
Sources reviewed

Requirements & limits

  • Latest release at review: 1.3.2, uploaded to PyPI on 2026-03-31 from tag v1.3.2 (the project publishes no GitHub release pages); it requires Python 3.8+ and pins PyQt5 5.15.7 for the GUI, and AArch64 support arrived in 1.3.0. The reviewed master commit (2026-09-03) is ten commits later and, still labelled 1.3.2, requires Python 3.11+ and PyQt6 6.5+. Install with pip install "vivisect[gui]"; releases before 1.0.0 are Python 2 only, and Python 2 workspaces are typically not loadable in Python 3.
  • Bundled helper libraries: vtrace/platforms/windll holds Microsoft’s dbghelp.dll and symsrv.dll for amd64 and i386, committed since 2014 and loaded by the Windows vtrace backend for symbol handling, and pyproject.toml packages them into the PyPI distribution. They are Microsoft binaries under Microsoft’s terms, not the project’s Apache-2.0 license, and no Microsoft license or notice accompanies them. The macOS backend ships a prebuilt machhelper.dylib next to its C source and Makefile.
  • Input is binaries or firmware images the user supplies. CircleCI runs the unittest suite on Python 3.11 against sample binaries from a separately cloned vivtestfiles repository, and a GitHub Actions workflow checks formatting; documentation is on Read the Docs. This review ran neither the analyzer nor the debugger.
  • Apache-2.0 license (COPYRIGHT names invisigoth, 2014); the Microsoft DLLs keep their own terms. The reviewed sources establish no REA or AI use.

About this entry

The description was reviewed against primary sources. This does not establish runtime testing, security auditing or verified compatibility.

Report an outdated entry Suggest a translation fix

Primary sources

  1. README.md GitHub · vivisect/vivisect · Revision 66c93f0
  2. pyproject.toml GitHub · vivisect/vivisect · Revision 66c93f0
  3. https://github.com/vivisect/vivisect/blob/v1.3.2/pyproject.toml
  4. CHANGELOG.rst GitHub · vivisect/vivisect · Revision 66c93f0
  5. vtrace/platforms/windll GitHub · vivisect/vivisect · Revision 66c93f0
  6. vtrace/platforms/win32.py GitHub · vivisect/vivisect · Revision 66c93f0
  7. vtrace/platforms/darwin GitHub · vivisect/vivisect · Revision 66c93f0
  8. envi/archs GitHub · vivisect/vivisect · Revision 66c93f0
  9. vivisect/parsers GitHub · vivisect/vivisect · Revision 66c93f0
  10. .circleci/config.yml GitHub · vivisect/vivisect · Revision 66c93f0
  11. COPYRIGHT GitHub · vivisect/vivisect · Revision 66c93f0
  12. https://pypi.org/project/vivisect/1.3.2/

More in Native binaries

All 158 entries in Native binaries