{
  "added_at": "2026-10-19",
  "additional_evidence_urls": [
    "https://github.com/cea-sec/miasm/blob/3671fc24d6e625c2d75f3311724eb6b0c97664f8/README.md#L503-L603",
    "https://github.com/cea-sec/miasm/blob/3671fc24d6e625c2d75f3311724eb6b0c97664f8/pyproject.toml",
    "https://github.com/cea-sec/miasm/blob/3671fc24d6e625c2d75f3311724eb6b0c97664f8/CHANGELOG.md",
    "https://github.com/cea-sec/miasm/blob/3671fc24d6e625c2d75f3311724eb6b0c97664f8/LICENSE",
    "https://github.com/cea-sec/miasm/blob/3671fc24d6e625c2d75f3311724eb6b0c97664f8/.github/workflows/tests.yml",
    "https://github.com/cea-sec/miasm/tree/3671fc24d6e625c2d75f3311724eb6b0c97664f8/miasm/arch",
    "https://github.com/cea-sec/miasm/tree/3671fc24d6e625c2d75f3311724eb6b0c97664f8/miasm/analysis",
    "https://github.com/cea-sec/miasm/tree/3671fc24d6e625c2d75f3311724eb6b0c97664f8/miasm/os_dep",
    "https://pypi.org/project/miasm/0.1.5/"
  ],
  "category": "binary-libraries",
  "description_en": "Python reverse-engineering framework for analyzing, modifying and generating binary programs. It reads, modifies and generates 32- and 64-bit PE and ELF files, assembles and disassembles x86, ARM, AArch64, MIPS, PowerPC, SH4, MSP430 and MeP code, and lifts it into its own intermediate language for symbolic execution, SSA and data-flow analysis, dependency graphs and expression simplification aimed at deobfuscation. Its JIT emulator runs shellcode or parts of binaries through LLVM, GCC, Clang or pure-Python backends, with Python callbacks that stand in for library functions, sandboxes with selected Windows API and Linux emulation, and dynamic symbolic execution through Z3.",
  "description_zh": "用于分析、修改和生成二进制程序的 Python 逆向工程框架。它可读取、修改和生成 32 位与 64 位 PE 和 ELF 文件，汇编和反汇编 x86、ARM、AArch64、MIPS、PowerPC、SH4、MSP430 与 MeP 代码，并将其提升到自有的中间语言，用于符号执行、SSA 与数据流分析、依赖图以及面向反混淆的表达式化简。其 JIT 模拟器可借助 LLVM、GCC、Clang 或纯 Python 后端运行 shellcode 或二进制中的部分代码，用 Python 回调代替库函数，提供模拟部分 Windows API 和 Linux 行为的沙箱，并可通过 Z3 进行动态符号执行。",
  "entry_url": "https://awesomerea.org/resources/miasm/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/miasm/",
  "evidence_url": "https://github.com/cea-sec/miasm/blob/3671fc24d6e625c2d75f3311724eb6b0c97664f8/README.md",
  "group": "tools",
  "id": "miasm",
  "json_url": "https://awesomerea.org/resources/miasm/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/miasm/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/miasm/index.md",
  "name": "Miasm",
  "name_zh": "Miasm 逆向工程框架",
  "record_type": "resource",
  "relationship": "foundation",
  "requirements": [
    "PyPI’s latest release and the newest tag are 0.1.5 from 2023-04-18; GitHub releases stop at v0.1.3 from 2019. The reviewed master commit still declares 0.1.5 but is 100 commits ahead of that tag, so current code is installed from a clone with pip or taken from the project’s Docker images. CI runs the regression suite on Ubuntu with Python 3.10 and 3.13.",
    "pyproject.toml requires Python 3.10+ with future and pyparsing, pinned to 3.3.2. Native jitter extensions are built only when a C compiler is available; otherwise installation continues without the jitter features unless MIASM_REQUIRE_JIT=1 is set. Optional extras add pycparser C-type parsing, Z3 for solver-backed dependency graphs and dynamic symbolic execution, llvmlite 0.44.0 for the LLVM backend, graphviz export and pycryptodome for Windows crypto API emulation. The README marks the LLVM backend untested on Windows.",
    "Binaries, shellcode and memory dumps come from the analyst. The bundled Windows API emulation targets 32-bit x86, and other library effects are modeled with Python callbacks. The IDA plugins use a subset of Miasm without the jitter.",
    "GPL-2.0-only. Lifted IR, simplified expressions and emulation results are analysis aids."
  ],
  "requirements_zh": [
    "PyPI 上的最新版本和最新标签均为 0.1.5，发布于 2023-04-18；GitHub Releases 只更新到 2019 年的 v0.1.3。所审阅的 master 提交仍标为 0.1.5，但比该标签多 100 个提交，因此当前代码需从克隆的仓库用 pip 安装，或使用项目的 Docker 镜像。CI 在 Ubuntu 上以 Python 3.10 和 3.13 运行回归测试。",
    "pyproject.toml 要求 Python 3.10+，依赖 future 和固定为 3.3.2 的 pyparsing。只有在存在 C 编译器时才会构建原生 JIT 扩展；否则安装会继续进行但缺少 JIT 相关功能，除非设置了 MIASM_REQUIRE_JIT=1。可选扩展包括 pycparser C 类型解析、用于求解器支持的依赖图和动态符号执行的 Z3、用于 LLVM 后端的 llvmlite 0.44.0、graphviz 导出，以及用于模拟 Windows 加密 API 的 pycryptodome。README 标明 LLVM 后端在 Windows 上未经测试。",
    "二进制、shellcode 和内存转储由分析者自行提供。自带的 Windows API 模拟面向 32 位 x86，其他库函数的效果通过 Python 回调来建模。IDA 插件只使用 Miasm 的部分功能，不包含 JIT。",
    "采用 GPL-2.0-only 许可。提升得到的 IR、化简后的表达式和模拟结果只是分析辅助。"
  ],
  "targets": [
    "binary"
  ],
  "url": "https://github.com/cea-sec/miasm",
  "verification": "source-reviewed",
  "verified_at": "2026-10-19"
}