Pharos – static binary analysis framework

Pharos is a static binary analysis framework. It is intended primarily for automated analysis of compiled programs and research into binary-analysis techniques.

The framework builds on the ROSE compiler infrastructure for disassembly, instruction semantics and control-flow analysis. Pharos then provides a collection of specialised tools for examining API behaviour, recovering object-oriented constructs, comparing functions and generating signatures. It is therefore more of an analysis toolkit than an interactive graphical reverse-engineering environment.

This is free and open source software.

Key Features

• APIAnalyzer locates sequences of API calls with specified data and control relationships.
• Detect operating-system interaction patterns represented by related API calls.
• OOAnalyzer recovers object-oriented constructs from compiled executables.
• Track object pointers between functions to identify members and methods.
• Use Prolog rules when recovering object attributes.
• CallAnalyzer reports statically determined parameters passed to API calls.
• Provide calling-convention, parameter and type analysis.
• FN2Yara generates YARA signatures for matching executable functions.
• Support binary similarity analysis by identifying shared functions.
• FN2Hash calculates hashes and descriptive properties for functions.
• Generate function characteristics suitable for further automated analysis.
• Include experimental program path analysis.
• Support multi-threaded analysis workloads.
• Use ROSE for disassembly and control-flow infrastructure.

Website: github.com/cmu-sei/pharos
Support:
Developer: Software Engineering Institute, Carnegie Mellon University
License: BSD (SEI) License

Pharos is written in C++. Learn C++ with our recommended free books and free tutorials.

Related Software

Read our verdict in the software roundup.

Explore our comprehensive directory of recommended free and open source software. Our carefully curated collection spans every major software category. This directory is part of our ongoing series of informative articles for Linux enthusiasts. It features hundreds of detailed reviews, along with open source alternatives to proprietary solutions from major corporations such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk. You’ll also find interesting projects to try, hardware coverage, free programming books and tutorials, and much more. Discovered a useful open source Linux program that we haven’t covered yet? Let us know by completing this form.