lifting-bits/mcsema

Health v2 · maintenance only

Flags: archived

Adoption not part of the score

2787 stars · 349 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

McSema is a framework that lifts native x86, amd64, aarch64, sparc32, and sparc64 executable binaries (ELF and PE) into LLVM bitcode. It works in two steps—control flow recovery via IDA Pro disassembly and instruction translation via the remill library—enabling program analysis, fuzzing, and binary recompilation.

Use cases

• lift a binary to llvm bitcode for analysis
• analyze a stripped executable without source code
• fuzz a closed-source binary with libFuzzer
• recompile a binary into a runnable program with modifications
• retroactively harden binaries against security bugs
• validate vendor binaries against expected behavior

When to choose

• you need to analyze or transform binaries without source code
• you want to apply LLVM-based tools (optimizers, fuzzers, sanitizers) to native binaries
• you need to lift x86, amd64, aarch64, or sparc binaries to bitcode

When to avoid

• you need a maintained tool with recent updates (latest release 2022)
• you cannot use IDA Pro for control flow recovery
• you need lifting for architectures beyond x86, amd64, aarch64, and sparc

Facets

framework · maturity maintenance

reverse-engineering compiler security parser reverse-engineering security compilers developer-tools windows cpp binary-lifting llvm-bitcode binary-analysis ida-pro binary-translation static-binary-rewriting remill linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="lifting-bits/mcsema")