# GoReSym

> Recover Go build metadata, function names and address ranges, source file and line tables, embedded types and strings from Go binaries, including stripped and some malformed unpacked samples. JSON output can be imported into IDA Pro with the included IDAPython script.

- Type: Tool
- Targets: Binary
- Category: Native analysis tools
- Relationship: Foundation tool
- Sources reviewed: 2026-10-17
- Added to the catalog: 2026-10-17
- Original resource: <https://github.com/mandiant/GoReSym>
- Primary source: <https://github.com/mandiant/GoReSym/blob/722897e0a80da0a06c00c5e40591a253a551f04e/README.md>
- Catalog page: <https://awesomerea.org/resources/goresym/>
- Record JSON: <https://awesomerea.org/resources/goresym/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/resources/goresym/index.md)

## Requirements & limits

- Reviewed release: v3.4.1, published 2026-09-14 and tagged at the reviewed commit, with prebuilt Linux, macOS and Windows archives; source builds need a recent Go toolchain.
- Documented support covers ARM64 and Intel x86/x64 Mach-O, ELF and PE binaries in either endianness; pclntab parsing and moduledata location need Go 1.2+, and type parsing Go 1.5+. Some stripped binaries need a manual version override, and type parsing fails if that version is wrong.
- MIT. Output is runtime and symbol metadata, not original source or decompiled code. The README's write-up link now redirects to a generic Mandiant page; the article is on the Google Cloud blog.

## Primary sources

1. <https://github.com/mandiant/GoReSym/blob/722897e0a80da0a06c00c5e40591a253a551f04e/README.md>
2. <https://github.com/mandiant/GoReSym/blob/722897e0a80da0a06c00c5e40591a253a551f04e/LICENSE>
3. <https://github.com/mandiant/GoReSym/blob/722897e0a80da0a06c00c5e40591a253a551f04e/IDAPython/goresym_rename.py>
4. <https://github.com/mandiant/GoReSym/releases/tag/v3.4.1>
5. <https://cloud.google.com/blog/topics/threat-intelligence/golang-internals-symbol-recovery>

## More in Native binaries

- [rev.ng](https://awesomerea.org/resources/revng/index.md) · Tool
- [Rizin](https://awesomerea.org/resources/rizin/index.md) · Tool
- [Decompiler Explorer](https://awesomerea.org/resources/decompiler-explorer/index.md) · Tool
- [pwndbg](https://awesomerea.org/resources/pwndbg/index.md) · Tool
- [DynamoRIO](https://awesomerea.org/resources/dynamorio/index.md) · Tool
- [Decompyle++ (pycdc)](https://awesomerea.org/resources/pycdc/index.md) · Tool

## About this entry

The description was reviewed against primary sources.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.