-
object
A unified interface for reading and writing object file formats
-
goblin
An impish, cross-platform, ELF, Mach-o, and PE binary parsing and loading crate
-
iced-x86
blazing fast and correct x86/x64 disassembler, assembler and instruction decoder written in Rust
-
tikv-jemalloc-sys
Rust FFI bindings to jemalloc
-
buffer-redux
Drop-in replacements for buffered I/O in
std::iowith extra features -
wasmtime-internal-jit-debug
INTERNAL: JIT debug interfaces support for Wasmtime
-
mmap-rs
A cross-platform and safe Rust API to create and manage memory mappings in the virtual address space of the calling process
-
safe-mmio
Types for safe MMIO device access, especially in systems with an MMU
-
percpu
Define and access per-CPU data structures
-
blondie
Collect CPU callstack samples from a windows process
-
arm-gic-driver
A driver for the Arm Generic Interrupt Controller
-
memflow
core components of the memflow physical memory introspection framework
-
pdb
A parser for Microsoft PDB (Program Database) debugging information
-
memory_addr
Wrappers and helper functions for physical and virtual addresses
-
arceos-childtask
A multi-task child-thread crate (from crates.io) for ArceOS with PFlash MMIO access via page tables
-
pdb2
A parser for Microsoft PDB (Program Database) debugging information
-
arceos-readpflash
A PFlash reader crate (from crates.io) for ArceOS with MMIO remapping via page tables
-
pelite
Lightweight, memory-safe, zero-allocation library for reading and navigating PE binaries
-
patina
Common types and functionality used in UEFI development
-
aarch64-paging
manipulate AArch64 VMSA page tables
-
patina_paging
Paging library for AArch64 & X64 architectures
-
svd2utra
SVD to UTRA library generator
-
smmalloc
smalloc is a simple, fast allocator
-
axaddrspace
ArceOS-Hypervisor guest address space management module
-
rvf-types
RuVector Format core types -- segment headers, enums, flags
-
wasmtime-jit-debug
JIT debug interfaces support for Wasmtime
-
kdmp-parser
A KISS, dependency free, Rust crate to parse Windows kernel crash-dumps created by Windows & its debugger
-
mu_pi
Platform Initialization (PI) Specification definitions and support code in Rust
-
memprocfs
Physical Memory Analysis Framework
-
bootloader-x86_64-common
Common code for the x86_64 bootloader implementations
-
wraith-rs
Safe abstractions for Windows PEB/TEB manipulation and anti-detection techniques
-
aarch64-cpu-ext
Extended AArch64 CPU utilities and cache management operations
-
dylex
A high-performance dyld shared cache extractor for macOS and iOS
-
hexspell
A open source lib to parse executables in Rust
-
malwaredb-virustotal
Logic and datatypes for interacting with VirusTotal
-
lgalloc
Large object allocator
-
x64
x86_64 support with LA57 (5-level paging) for 57-bit virtual addresses
-
samply
A command line profiler for macOS and Linux
-
dearxan
Static analyzer and patcher for the Arxan anti-debug/DRM as found in FromSoftware titles
-
vmi
A modular and extensible library for Virtual Machine Introspection
-
ointers
What do you call a pointer we stole the high bits off? An ointer
-
vmcircbuffer
Double Mapped Circular Buffer
-
virtio-drivers-and-devices
VirtIO guest drivers and devices. Fork of rcore-os/virtio-drivers.
-
virtual-buffer
A cross-platform library for dealing with buffers backed by raw virtual memory
-
libdrm_amdgpu_sys
libdrm_amdgpu bindings for Rust, and some methods ported from Mesa3D
-
threatflux-binary-analysis
Comprehensive binary analysis library with multi-format support, disassembly, and security analysis
-
xous-tools
A set of tools for managing Xous ecosystem binaries
-
patina_pi
Platform Initialization (PI) Specification definitions and support code in Rust
-
elb
that supports reading ELF files and patching RPATH, RUNPATH and interpreter
-
azathoth-core
Core OS types for the AzathothC2 project
-
fxmac_rs
FXMAC Ethernet driver in Rust for PhytiumPi (Phytium Pi) board, supporting DMA-based packet transmission and reception
-
ms-coff
Definitions for Windows COFF binaries
-
ostd
Rust OS framework that facilitates the development of and innovation in OS kernels
-
vivisect
A cross-platform, ELF, Mach-o, and PE binary parsing and loading crate
-
mdbx-rs
FFI bindings to mdbx-rs, a fast embedded key-value database (downloads prebuilt binaries)
-
mace
Automated extration of malware configuration, focusing on C2 communication
-
candle-cuda-vmm
CUDA Virtual Memory Management bindings for elastic KV cache allocation in Candle
-
ghostptr
Lightweight, ergonomic library for Windows process interaction
-
bias-goblin
An impish, cross-platform, ELF, Mach-o, PE, and TE binary parsing and loading crate
-
sliceable-ring-buffer
A double-ended queue that Deref's into a slice
-
superfetch
A lib allowing to utilize the Windows superfetch magic to translate virtual addresses to physical
-
xhypervisor
Hardware-accelerated virtualization on OS X
-
rusty-hermit
A Rust-based library operting system
-
x2apic
interface to the x2apic interrupt architecture
-
axdriver_virtio
Wrappers of some devices in the
virtio-driverscrate, that implement traits in theaxdriver_baseseries crates -
wasmtime-profiling
Runtime library support for Wasmtime
-
hermit-kernel
A Rust-based library operating system
-
ahv
Bindings for Apple Silicon Hypervisor
-
tos-tbpf
Virtual machine and JIT compiler for eBPF programs
-
stable-aml
parsing AML, stable rust
-
page-primer
speeds up your program by "priming" memory pages from your binary
-
jupnet_rbpf
Virtual machine and JIT compiler for eBPF programs
-
polished_elf_loader
Modular, safe ELF loader for Polished OS, supporting UEFI and no_std environments
-
vmi-os-windows
Windows OS specific code for VMI
-
hyperpom
AArch64 fuzzing library based on the Apple Silicon hypervisor
-
objdiff-core
A local diffing tool for decompilation projects
-
paging-calculator
CLI utility that helps you to calculate indices into the page table from a virtual address. The tool knows multiple paging implementations, such as x86, x86 with PAE, x86_64 and x86_64 with a 5-level page table.
-
jevmalloc-sys
Rust allocator wrapping jemalloc
-
mwcas
Multi-word CAS primitive
-
mmap-append
Append-only memory-mapped I/O, resizable, with low lock contention
-
rustbin
Parsers for binary file formats (mostly Windows related)
-
goblin-experimental
(Experimental) An impish, cross-platform, ELF, Mach-o, and PE binary parsing and loading crate
-
tikv-jemalloc-sys2
Rust FFI bindings to jemalloc
-
arm_pl031
System Real Time Clock (RTC) Drivers for aarch64 based on PL031
-
lde
Length disassembler for x86 and x86_64
-
vmi-os-linux
Linux OS specific code for VMI
-
vminer
Virtual Machine Introspection library
-
libhermit-rs
A Rust-based library operating system
-
magic-buffer
a virtual ring buffer implementation that magically wraps around itself
-
exe
A PE (Portable Executable) library!
-
ariane
recover symbols from release compiled executables
-
moon-feature
Windows Kernel Feature
-
vmsavedstatedump_rs
Rust abstractions of VmSavedStateDumpProvider Windows 10 SDK API
-
solana-sbpf
Virtual machine and JIT compiler for eBPF programs
-
stivale-boot
parsing stivale and stivale 2 structures
-
thumb2-stack-size
estimates stack space requirements of thumb2 programs
-
bininfo
file information for PE and ELF files
-
jupnet-jbpf
Virtual machine and JIT compiler for eBPF programs
-
cbe_rbpf
Virtual machine and JIT compiler for eBPF programs
-
winstacks
Collect CPU call stack samples from a windows process
-
accessor
access MMIO space
-
export-resolver
A PE (Portable Executable) parser which will dynamically resolve virtual addresses of functions loaded in a PE. It will store these function virtual addresses in a structure for retrieval at the developers behest.
-
ruspiro-mmu
Functions to use and configure the MemoryManagementUnit (MMU) of the Raspberry Pi
-
cartes_rbpf
Virtual machine and JIT compiler for eBPF programs
-
polkatool
A swiss knife toolkit for PolkaVM
-
pewter
reading and writing PE files
-
orecc-elf
Easy read/write ELF 32/64 relocatibles/executables/dynamics
-
vmi-core
Core VMI library
-
trezoa-sbpf
Virtual machine and JIT compiler for eBPF programs
-
reflective_pe_dll_loader
Reflective PECOFF DLL loader. Loads a DLL from memory for execution.
-
dpdk-unix
An internal crate to make it easier to iterate on unix requirements
-
page-walker
A generic page table walker in Rust for operating systems, hypervisors, etc
-
mmap-rs-with-map-from-existing
A temporary fork of mmap-rs with support for creating pages from raw memory. Will be deprecated in near future.
-
winrt_gen
Code generation for the winrt crate
-
atlas-sbpf
Virtual machine and JIT compiler for eBPF programs
-
mips-rt-macros
Attributes re-exported in
mips-rt
Try searching with DuckDuckGo or on crates.io.