Tool
Xori
Automation-ready disassembly and static analysis library for shellcode and PE binaries that outputs disassembly, functions and imports as JSON. It offers a light emulation mode that enumerates all paths and a slower full emulation mode, simulated TEB and PEB structures, and FLIRT-style signatures.
- Targets
- Binary
- Category
- Native analysis tools
- Relationship
- Foundation tool
- Sources reviewed
Requirements & limits
- Covers i386 and x86-64 PE, PE+ and plain shellcode. Built with Rust and Cargo; the README cites rustc 1.27.0, and the browser GUI needs Node.js.
- AGPL-3.0 per LICENSE.txt.
About this entry
The description was reviewed against primary sources.
Primary sources
- README.md GitHub · endgameinc/xori · Revision d58a742
More in Native binaries
- binglide · Tool
- ERESI · Tool
- pixd · Tool
- Universal Extractor 2 · Tool
- ElleKit · Tool
- ProcDump for Linux and macOS · Tool