Packages
pyelftools parses and analyzes ELF binary files and DWARF debugging information in pure Python, with no external dependencies.
Install it if you need to read or analyze ELF binaries or debug information from Python.
Disassembles VBA p-code from Microsoft Office documents to reveal the compiled macro instructions that actually execute, regardless of whether source code is present.
However, do not rely on it for modern Office versions (2010+) without testing—the package is abandoned and has known disassembly gaps in 64-bit Office 2016.
Pwntools is a CTF framework and exploit development library providing tools for writing exploits, assembling/disassembling code, interacting with remote services, and analyzing binaries.
Install it if you work on exploit development, security research, or CTF challenges; skip it if you don't need those capabilities.
Hachoir parses and displays binary files as a tree of typed fields, letting you inspect and edit individual bits, bytes, and structures within any binary stream.
Maps each value in a JSON document to its source location (line, column, character position) and JSON Pointer path, enabling precise error reporting and source-aware JSON processing.
SMDA is a recursive disassembler library that recovers control flow graphs from binary files and memory dumps, supporting x86/x64, AArch64, .NET CIL, and Dalvik bytecode with output as functions, basic blocks, and instruction-level edges.
Install it if you need to extract control flow structure from binaries or memory dumps; avoid it if you only need basic disassembly without CFG analysis or if you…
Enables programmatic binary analysis and reverse engineering by running IDA Pro as a Python package outside the IDA UI, providing access to IDA's analysis APIs and type hints for IDE support.
Parse, compile, and match FLIRT signatures (Fast Library Identification and Recognition Technology) against byte sequences to recognize statically-linked code without IDA Pro.
Vivisect is a pure-Python disassembler, debugger, emulator, and static analysis framework for binary analysis and reverse engineering.
Install it if you do reverse engineering, malware analysis, or security research; skip it if you need only simple disassembly or prefer established alternatives like…
Parses C++ header files and extracts their structure—classes, methods, properties, namespaces, and free functions—into a Python data structure for programmatic inspection.
Mythril analyzes EVM bytecode for security vulnerabilities in smart contracts using symbolic execution, SMT solving, and taint analysis.
Install it if you develop or audit Ethereum smart contracts and need bytecode-level security analysis.