# Xori

> Automation-ready disassembly and static analysis library for shellcode and PE binaries that outputs disassembly, functions and imports as JSON. It offers a light emulation mode that enumerates all paths and a slower full emulation mode, simulated TEB and PEB structures, and FLIRT-style signatures.

- Type: Tool
- Targets: Binary
- Category: Native analysis tools
- Relationship: Foundation tool
- Sources reviewed: 2026-11-06
- Added to the catalog: 2026-11-06
- Original resource: <https://github.com/endgameinc/xori>
- Primary source: <https://github.com/endgameinc/xori/blob/d58a7427ee7928a92e32cd8fe6d1153b2aaf5568/README.md>
- Catalog page: <https://awesomerea.org/resources/xori/>
- Record JSON: <https://awesomerea.org/resources/xori/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/resources/xori/index.md)

## Requirements & limits

- Covers i386 and x86-64 PE, PE+ and plain shellcode. Built with Rust and Cargo; the README cites rustc 1.27.0, and the browser GUI needs Node.js.
- AGPL-3.0 per LICENSE.txt.

## Primary sources

1. <https://github.com/endgameinc/xori/blob/d58a7427ee7928a92e32cd8fe6d1153b2aaf5568/README.md>

## More in Native binaries

- [binglide](https://awesomerea.org/resources/binglide/index.md) · Tool
- [ERESI](https://awesomerea.org/resources/eresi/index.md) · Tool
- [pixd](https://awesomerea.org/resources/pixd/index.md) · Tool
- [Universal Extractor 2](https://awesomerea.org/resources/universal-extractor-2/index.md) · Tool
- [ElleKit](https://awesomerea.org/resources/ellekit/index.md) · Tool
- [ProcDump for Linux and macOS](https://awesomerea.org/resources/procdump-linux/index.md) · Tool

## About this entry

The description was reviewed against primary sources.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.