# airbus-seclab/bincat

Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free detection

Repository: https://github.com/airbus-seclab/bincat
Canonical: https://ross.abutalabs.com/products/bincat
Language: OCaml
License Family: other
Topics: ida-plugin, taint-analysis, reverse-engineering, disassembly
Last push: 2025-02-25T16:54:39+00:00

## Health v2 (maintenance only)
Score: 29/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 8, release rhythm 16, longevity 100
- inputs: {"age_days": 3383, "days_push": 554, "days_rel": 554, "gap_med": 145, "n_releases_24m": 2}
- flags: no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1872, forks 167 (observed 2026-08-28T04:05:46.977828+00:00)

## What it is
BinCAT is a static binary code analysis toolkit that performs value analysis, taint analysis, type reconstruction, and use-after-free/double-free detection on x86, ARM, and PowerPC binaries. It integrates as an IDA plugin and can also be driven via Python or a remote web service for automation.

## Use cases
- analyze register and memory values in a binary from IDA
- perform taint analysis on disassembled code
- detect use-after-free and double-free bugs in binaries
- reconstruct and propagate types in stripped binaries
- automate static binary analysis with Python
- run backward and forward analysis on x86 or ARM code

## When to choose
- you work in IDA and need automated value or taint analysis of binaries
- you need to detect memory-safety bugs like UAF and double-free statically
- you analyze x86, ARM, or PowerPC binaries and want type reconstruction
- you want scriptable or remote binary analysis for reverse engineering workflows

## When to avoid
- you need dynamic analysis or emulation rather than static analysis
- you don't use IDA and need a standalone GUI disassembler
- you need architectures beyond x86, ARM, and PowerPC
- you require a permissively licensed tool - the license is unspecified

## Facets
- artifact type: plugin
- maturity: active
- function: reverse-engineering, security, linter, parser
- domain: reverse-engineering, security, developer-tools
- platform: windows, python, cpp
- tags: ida-plugin, taint-analysis, value-analysis, disassembly, binary-analysis, use-after-free-detection, type-reconstruction, ocaml, linux, macos

## Member repositories
- airbus-seclab/bincat (main) score 29

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:05:46.977828+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:14:56.552752+00:00, confidence not recorded.
  - readme: https://github.com/airbus-seclab/bincat (fetched 2026-08-28T04:05:46.977828+00:00, sha 1001519596d5)
- Data as of 2026-08-30T08:39:29.467469+00:00.