AdityaJadhav24/HexForge
GitHub: AdityaJadhav24/HexForge
Stars: 1 | Forks: 0
# HexForge
### Experimental EVM Bytecode Analysis & Reverse Engineering Framework
*Exploring how smart contract analysis tools work beneath the Solidity layer.*
## Overview
HexForge is a research-oriented EVM analysis framework written in Go.
Instead of analyzing Solidity source code, HexForge focuses on understanding smart contracts directly from deployed bytecode through:
* EVM disassembly
* CFG reconstruction
* Stack simulation
* IR / SSA-inspired representations
* Taint & dataflow analysis
* Vulnerability detection pipelines
The project exists primarily as a learning and experimentation platform for EVM internals, static analysis, reverse engineering, and security tooling architecture.
## Quick Start
### Method 1: Global Installation (Recommended)
Install HexForge globally using Go to use it from anywhere on your system:
go install github.com/AdityaJadhav24/hexforge/cmd/hexforge@latest
Once installed, you can use the tool directly:
# Disassemble bytecode
hexforge disasm test.bin
# Run everything
hexforge all test.bin
### Method 2: Run from Source
Alternatively, you can clone the repository and run it directly without installing:
git clone https://github.com/AdityaJadhav24/hexforge.git
cd hexforge
# Disassemble bytecode
go run ./cmd/hexforge disasm test.bin
# Run everything
go run ./cmd/hexforge all test.bin
## Commands
| Command | Description |
| ----------- | -------------------------------- |
| `disasm` | Disassemble EVM bytecode |
| `scan` | Run vulnerability detectors |
| `analyze` | Perform semantic analysis |
| `cfg` | Generate Control Flow Graph |
| `ir` | Generate IR / SSA representation |
| `selectors` | Extract function selectors |
| `all` | Execute all analysis modules |
### Examples
hexforge disasm test.bin
hexforge scan test.bin --json
hexforge analyze test.bin
hexforge cfg test.bin --dot
hexforge ir test.bin --ssa --defuse
hexforge all test.bin -o output/
## Architecture
Raw Bytecode
↓
Disassembler
↓
Basic Blocks
↓
CFG
↓
IR Layer
↓
Analysis Passes
↓
Detectors
↓
Reports
## Project Goals
### Primary
* Understand EVM bytecode semantics
* Explore reverse engineering techniques
* Build modular analysis infrastructure
* Study CFG recovery and stack analysis
* Experiment with SSA-inspired models
* Learn taint/dataflow analysis
### Non-Goals
* Production-grade auditing
* Guaranteed vulnerability detection
* Complete symbolic execution
* Replacing mature analyzers
## Repository Structure
cmd/ CLI entrypoints
analysis/ Analysis orchestration
cfg/ Control flow recovery
detectors/ Vulnerability detectors
disasm/ EVM disassembly
ir/ Intermediate representations
taint/ Dataflow experiments
reporting/ Reporting systems
utils/ Shared utilities
## Important Disclaimer
## License
MIT License标签：EVTX分析