Binary Analysis Next Generation (BANG)
Tool and Usage
Project details
- License
- AGPL 3.0
- Programming language
- Python
- Author
- Armijn Hemel
- Latest release
- No release found
- Latest release date
- Unknown
Project health
Links
 | GitHub project |
Why this tool?
BANG is a framework to unpack files recursively and scan them. The files can be firmware, binaries, or malware. The main goal is to scan all files and perform classification and labeling. This way each file can be further analyzed based on the characteristics.
How it works
The tool has signatures, carvers, verifiers, and unpackers to deal with most common data formats. Based on each data format, the file will be parsed. For example, a compressed file might be unpacked to do the analysis.
Background information
A few names are used within the project. The GitHub project itself is named binaryanalysis-ng, with the full name being Binary Analysis Next Generation. This is abbreviated to BANG.
Usage and audience
Binary Analysis Next Generation is commonly used for binary analysis, malware analysis, or malware scanning. Target users for this tool are malware analysts and security professionals.
Features
- Command line interface
- JSON output supported
Example usage and output
Tool review and remarks
The review and analysis of this project resulted in the following remarks for this security tool:
Strengths
- + The source code of this software is available
Weaknesses
- - No releases on GitHub available
Installation
Supported operating systems
Binary Analysis Next Generation is known to work on Linux.
Dependencies
Several dependencies are required to use Binary Analysis Next Generation.
- Python 3
Binary Analysis Next Generation alternatives
Similar tools to Binary Analysis Next Generation:
Cutter
Cutter is a graphical user interface for radare2, the well-known reverse engineering framework. Read how it works in this review.
LIEF
LIEF is a library to analyze executable formats like ELF, MachO, and PE. It can be used during reverse engineering, binary analysis, and malware research.
radare2
Radare2 is a tool to perform reverse engineering on files of all types. It can be used to analyze malware, firmware, or any other type of binary files. Read how it works in this review.
This tool page was updated at . Found an improvement? Help the community by submitting an update.
Related tool information
Categories
This tool is categorized as a Linux malware analysis tool and binary analysis tool.