{
  "added_at": "2026-11-06",
  "additional_evidence_urls": [
    "https://github.com/VAHPEM/rust-deobf/blob/04a9c4a371cb77635e2eed2c36157af36e058961/premium/README.md"
  ],
  "category": "native-analysis",
  "description_en": "rust-deobf analyzes compiled, mainly Rust, ELF, PE and Mach-O binaries to recover hidden strings and related artifacts. It combines static call-site analysis with Unicorn function emulation, identifies Rust metadata and library functions, and offers unpacking and Ghidra annotations. CLI and MCP interfaces expose the core analysis; deeper control-flow and virtualization modules have separate licensing.",
  "description_zh": "rust-deobf 分析以 Rust 为主的 ELF、PE 和 Mach-O 二进制文件，恢复隐藏字符串及相关信息。工具结合静态调用点分析与 Unicorn 函数仿真，还可识别 Rust 元数据和库函数、处理打包样本并为 Ghidra 添加注释。核心功能提供命令行和 MCP 接口；更深入的控制流及虚拟化模块另有许可。",
  "entry_url": "https://awesomerea.org/resources/rust-deobf/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/rust-deobf/",
  "evidence_url": "https://github.com/VAHPEM/rust-deobf/blob/04a9c4a371cb77635e2eed2c36157af36e058961/README.md",
  "group": "tools",
  "id": "rust-deobf",
  "json_url": "https://awesomerea.org/resources/rust-deobf/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/rust-deobf/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/rust-deobf/index.md",
  "name": "rust-deobf",
  "name_zh": "rust-deobf Rust 二进制去混淆工具",
  "record_type": "resource",
  "relationship": "foundation",
  "requirement_facets": [
    "prerequisites",
    "scope",
    "license"
  ],
  "requirements": [
    "Python 3.10 or newer is specified for the core package.",
    "The documented analysis covers x86-64, ARM64 and 32-bit x86 across ELF, PE and Mach-O.",
    "The core is Apache-2.0; premium modules are dual-licensed under AGPL-3.0-or-later or a commercial license."
  ],
  "requirements_zh": [
    "核心包要求 Python 3.10 或更新版本。",
    "文档列出的分析范围为 ELF、PE 和 Mach-O 中的 x86-64、ARM64 及 32 位 x86。",
    "核心采用 Apache-2.0；premium 模块可选择 AGPL-3.0-or-later 或商业许可证。"
  ],
  "targets": [
    "binary"
  ],
  "url": "https://github.com/VAHPEM/rust-deobf",
  "verification": "source-reviewed",
  "verified_at": "2026-11-06"
}