Analyze binary files across a private browser workspace. Preserve SHA-256 identity, notes, findings, derived artifacts, and local handoffs between tools.
Binary Lab gives browser-based binary analysis tools a shared local workspace. Open a file once, preserve its SHA-256 identity, and hand the same bytes to format inspection, strings, entropy, hex editing, disassembly, YARA-X, diffing, WebAssembly debugging, or constrained emulation.
Tools can add structured findings with severity, byte ranges, and supporting detail. Add analyst notes and tags, review the activity trail, then export a portable JSON or Markdown evidence report. Reports omit the original file bytes by default.
Artifact bytes live in IndexedDB in this browser and expire after seven days. The workspace is useful for triage and reproducibility, but it is not a forensic chain-of-custody system or a hardened malware sandbox.
No. Artifact bytes are stored in IndexedDB in your current browser. Tool handoffs pass an opaque local session identifier, not the file contents.
Sessions use a rolling seven-day expiration and the workspace retains at most 24 recent artifacts. You can delete an artifact immediately from the workspace.
No. It is a reproducibility aid containing the artifact identity, analyst notes, findings, and activity. It is not tamper-evident evidence handling or a legal chain-of-custody system.
Inspect PE, ELF, Mach-O, universal binaries, and Unix archives with bounded parsers, sections, imports, exports, mitigations, signatures, and suspicious regions.
Author, compile, and run YARA-X rules against local artifacts with exact pattern offsets, bounded scans, and evidence handoff.
Compare binary artifacts and create deterministic forward or reverse copy-insert patches locked to verified SHA-256 identities.
Inspect WebAssembly binaries and WAT, disassemble functions, execute one instruction at a time, set breakpoints and memory watchpoints, and move backward through a deterministic execution trace. Runs locally in your browser.
Free online disassembler: convert hex machine code to assembly. Multi-architecture (x86, x86-64, ARM, ARM64, RISC-V, MIPS, PowerPC, SPARC, 68K), Intel/AT&T syntax, 100% client-side.