illera88/Ponce

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1627 stars · 85 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Ponce is an IDA Pro plugin that adds one-click symbolic execution and taint analysis over binaries, built on the Triton engine and written in C/C++. It integrates these capabilities directly into IDA's disassembler/debugger for x86 and x64 targets.

Use cases

• run symbolic execution on a binary inside IDA Pro
• perform taint analysis to see which registers and memory I control
• develop exploits more efficiently by finding controllable inputs and ROP gadgets
• reverse engineer malware command parsers by symbolizing known commands
• recover protocol formats, magic numbers, and headers from controlled user input
• solve for inputs that reach a specific code path in a debugger

When to choose

• you already use IDA Pro (>= 7.0) and want symbolic execution without leaving the tool
• you need taint analysis or input-solving during interactive reverse engineering
• you do exploit development, malware analysis, or protocol reversing on x86/x64 binaries

When to avoid

• you need a standalone or scriptable symbolic execution engine rather than an IDA plugin (consider angr or Triton directly)
• you do not have an IDA Pro license
• you target architectures other than x86/x64

Facets

plugin · maturity active

reverse-engineering security developer-tools security reverse-engineering developer-tools windows cross-platform ida-pro symbolic-execution taint-analysis binary-analysis disassembler exploit-development malware-analysis cpp linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="illera88/Ponce")