Cisco-Talos/pyrebox
Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU observed · 2026-08-28
Health v2 · maintenance only
10/100
- Activity 0
- Release rhythm 35
- Longevity 100
Flags: no_releases archived
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.
- gap_med: n/a
- age_days: 3344
- days_rel: n/a
- days_push: 931
- n_releases_24m: 0
Adoption not part of the score
1684 stars · 254 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
PyREBox is a Python-scriptable reverse engineering sandbox built on QEMU that provides whole-system dynamic analysis and debugging of running virtual machines. It uses virtual machine introspection to inspect and modify guest memory and registers without modifying the guest OS, driven via an IPython shell and Python API.
Use cases
- analyze malware in an instrumented VM
- script dynamic analysis of a running guest OS
- inspect guest memory and registers from outside the VM
- automate reverse engineering tasks with Python scripts
- trace process execution inside a QEMU emulator
- extract forensic information from a live VM
When to choose
- you need whole-system, guest-transparent dynamic analysis of Windows or Linux VMs
- you want to write analysis tooling in Python on top of QEMU
- you are doing malware analysis or threat research with VM introspection
When to avoid
- you need an actively maintained tool - the project is archived and unmaintained
- you need modern CPU/OS support or recent QEMU features
- you need static analysis or symbolic execution out of the box
Facets
framework · maturity abandoned
reverse-engineering simulation security security reverse-engineering python cpp qemu vmi malware-analysis dynamic-analysis sandbox archived debugging instrumentation virtualization linux
4 sources
- readme: https://github.com/Cisco-Talos/pyrebox · fetched 2026-08-28 · cdf059dfa1dc
- homepage: https://talosintelligence.com/pyrebox · fetched 2026-08-29 · 3263ab1aec8d
- site_page: https://talosintelligence.com/about · fetched 2026-08-29 · cb4423ee92ac
- site_page: https://support.talosintelligence.com · fetched 2026-08-29 · c0133f3b8a0e
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| Cisco-Talos/pyrebox | main | 10 |
For agents
markdown · JSON · MCP: product_card(name="Cisco-Talos/pyrebox")
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem