← All tools

sharem

https://github.com/Bw3ll/sharem

Open Source

Categories

Evasion Reverse Engineering

Description

SHAREM is a shellcode analysis framework, capable of emulating more than 45,000 WinAPIs and virutally all Windows syscalls. It also contains its own custom disassembler, with many innovative features, such as being able to show the deobfuscated disassembly of an encoded shellcode, or integrating emulation data to enhance the disassembly.

Keywords

disassembler emulation shellcode python

Screenshots

Example Usage

After SHAREM is installed, when you first run a shellcode, you want to be inside the sharem_cli folder. For instance, when in that directory, you could run