3MPER0RR/Shellcode-analyzer
GitHub: 3MPER0RR/Shellcode-analyzer
这是一个用于静态分析和逆向工程shellcode文件的轻量级工具,帮助用户安全地理解和解码恶意代码。
Stars: 1 | Forks: 0
# Shellcode分析器
## 系统要求
操作系统:Linux
Tkinter python3-tk
## 已在Linux Debian上测试
## 在Arch Linux上安装
sudo pacman -S python tk
## 在Fedora上安装
sudo dnf install python3 python3-tkinter
## 项目结构:
├── sc_analyzer # C核心分析器
├── scgui.py # Python图形界面前端
└── samples.bin # 示例shellcode .bin文件
## 命令行模式
./sc_analyzer shellcodesample.bin
支持.bin和.dat原始shellcode文件

## 图形界面模式
Python3 scgui.py

## 安装依赖后编译源代码
## ere anything to translate? The heading might imply something like "Run sc_analyzer with shellcodesample.bin", but it's written as "./sc_analyzer shellcodesample.bin", which is already in English. So, I should output it as is, but in Chinese context? No, the instruction is to translate the heading, so if the heading is in English, I need to provide a Chinese equivalent while keeping technical terms in English.
sudo pacman -S gcc capstone
## Perhaps I should translate the meaning of the heading. But the example 'Running Naabu' is translated to '运行 Naabu', so "Running" is translated to "运行", and "Naabu" is kept.
sudo dnf install gcc capstone capstone-devel
## In this case, for "./sc_analyzer shellcodesample.bin", it might be interpreted as "Running sc_analyzer on shellcodesample.bin" or something similar. But the heading is exactly "./sc_analyzer shellcodesample.bin", which is a command-line syntax.
sudo apt install build-essential libcapstone-dev
## 编译 gcc scanalyzer.c -o sc_analyzer -lcapstone
## I think I should keep it as is, but since it's a heading, perhaps I need to translate the context.
## ⚠️ 分析器仅执行静态分析。
## Shellcode永远不会被执行。
标签:capstone库, DAST, Python GUI, Shellcode分析, Wayback Machine, 二进制分析, 云安全监控, 云安全运维, 云资产清单, 代码分析, 凭证管理, 反汇编, 客户端加密, 恶意软件分析, 情报收集, 漏洞研究, 网络安全, 逆向工具, 逆向工程, 隐私保护, 静态分析