{
  "added_at": "2026-11-06",
  "additional_evidence_urls": [
    "https://github.com/patois/HexraysToolbox/blob/d04869a3d6098a4ae4f60989d455d4bf3e572bad/hxtb.py",
    "https://github.com/patois/HexraysToolbox/tree/d04869a3d6098a4ae4f60989d455d4bf3e572bad/hxtbshell_queries",
    "https://github.com/patois/HexraysToolbox/blob/d04869a3d6098a4ae4f60989d455d4bf3e572bad/LICENSE"
  ],
  "category": "native-analysis",
  "description_en": "IDAPython scripts that find code patterns in Hex-Rays decompiler output, independent of the binary's processor architecture, by running user-written lambda queries over the decompiled ctree. Queries run from the hxtb-shell GUI inside IDA, from IDAPython through functions such as find_expr() and find_item(), from interactive command-line helpers or in batch mode over a set of files. The README's use cases include finding vulnerabilities and their variants, locating code patterns from previously reversed executables in newly decompiled code, malware variant analysis and finding patterns across binaries built for different architectures.",
  "description_zh": "一组 IDAPython 脚本，通过对反编译得到的 ctree 运行用户编写的 lambda 查询，在 Hex-Rays 反编译输出中查找代码模式，与二进制文件的处理器架构无关。查询可在 IDA 内的 hxtb-shell 图形界面中运行，也可在 IDAPython 中通过 find_expr()、find_item() 等函数调用，或借助交互式命令行辅助函数运行，还能以批处理方式对一组文件执行。README 列出的用途包括查找漏洞及其变种、在新反编译的代码中定位此前逆向过的程序里的代码模式、恶意软件变种分析，以及在为不同架构编译的二进制文件之间查找相同模式。",
  "entry_url": "https://awesomerea.org/resources/hexrays-toolbox/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/hexrays-toolbox/",
  "evidence_url": "https://github.com/patois/HexraysToolbox/blob/d04869a3d6098a4ae4f60989d455d4bf3e572bad/Readme.md",
  "group": "tools",
  "id": "hexrays-toolbox",
  "json_url": "https://awesomerea.org/resources/hexrays-toolbox/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/hexrays-toolbox/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/hexrays-toolbox/index.md",
  "name": "HexRays Toolbox",
  "name_zh": "HexRays Toolbox 反编译代码模式查询脚本",
  "record_type": "resource",
  "relationship": "foundation",
  "requirement_facets": [
    "prerequisites",
    "scope",
    "license"
  ],
  "requirements": [
    "Needs a valid IDA license and a valid Hex-Rays decompiler license for each target architecture. The repository has no releases; the reviewed master commit dates from 2023-06-20.",
    "Example queries for hxtb-shell are in the hxtbshell_queries folder, and the shell also accepts Python expressions copied from the context viewer of the separate HRDevHelper plugin.",
    "CC0-1.0 per LICENSE."
  ],
  "requirements_zh": [
    "需要有效的 IDA 许可证，以及每种目标架构对应的有效 Hex-Rays 反编译器许可证。仓库没有发布版本，所审阅的 master 分支提交日期为 2023-06-20。",
    "hxtb-shell 的示例查询位于 hxtbshell_queries 文件夹；该界面也接受从另一款插件 HRDevHelper 的上下文查看器中复制的 Python 表达式。",
    "依 LICENSE 采用 CC0-1.0 许可。"
  ],
  "targets": [
    "binary"
  ],
  "url": "https://github.com/patois/HexraysToolbox",
  "verification": "source-reviewed",
  "verified_at": "2026-11-05"
}