libemu - x86 Shellcode Emulation

Libemu is a small library written in C offering basic x86 emulation and shellcode detection. Libemu turns shellcode instructions into function calls the shellcode performs, so an analyst can quickly discern the actions of the shellcode and answer questions whether the shellcode is downloading a program or executing a process. It is the de-facto standard when it comes to analyzing shellcode.

Downloads