Miasm — authorized reverse-engineering framework

Last updated: · By the BinBench editorial team · Stars and releases checked via the GitHub API
For legal, authorized and educational use only. Only analyze software you own or have written permission to examine.
Quick answer

Miasm (cea-sec/miasm) is a Python reverse-engineering framework. Release v0.1.3 (2019-12-12 UTC) remained the latest GitHub Release object on 2026-10-24. License is GPL-2.0. Use it on binaries and traces you are authorized to analyze.

On this page

Snapshot

FieldValue
LicenseGPL-2.0
Latest checkedv0.1.3 (2019-12-12 UTC; still latest Release object 2026-10-24)
JobPython RE framework: disasm, IR, symbolic/JIT helpers
Stars (order of magnitude)~4.0k on GitHub (counts change daily)
Peersangr, Triton, Capstone

Allowed framing

  • Building lab analysis scripts for your samples.
  • Teaching IR/expression concepts in a classroom.
  • Comparing framework styles before committing to a research stack.

Scope we will not cover

  • No exploit PoC cookbooks.
  • No DRM / license-check / anti-tamper bypass recipes.
  • No “auto-crack commercial software” framing.

Beginner path (authorized only)

  1. Start with angr if you want a batteries-included Python platform.
  2. Install Miasm from official sources; pin the exact commit/release your lab reviews.
  3. Practice on tiny binaries you compiled before touching IR malware.
  4. Pair with Capstone notes when you need a standalone disassembler library.
  5. Document solver/JIT backends and resource limits — symbolic runs can explode.
Which to pick
  • Use Miasm when you want its Python IR/expression tooling style.
  • Prefer angr for many end-to-end research scripts.
  • Keep authorized-use framing; refuse exploit PoC requests.

For legal, authorized and educational use only.

FAQ

What is Miasm?

Miasm is a Python reverse-engineering framework with disassembly, intermediate representation, expression simplification and related analysis helpers used to build custom RE tooling.

Which version is cited?

v0.1.3 published 2019-12-12 UTC on cea-sec/miasm Releases (still the latest GitHub Release object on 2026-10-24; pin git revisions carefully if you track master).

What license applies?

Upstream LICENSE is GNU GPL v2; GitHub reports GPL-2.0 (checked 2026-10-24).

angr/Triton or Miasm?

angr is a higher-level binary analysis platform. Triton is a DBA library with SMT lifting. Miasm fits when you want its IR/expression style inside custom Python tooling.

Does this teach writing exploits?

No. Authorized research and education only — BinBench will not supply exploit PoCs or DRM bypass recipes.

Sources