Bokken is a GUI for the Pyew and Radare2 projects. It provides an interface to almost all the features of Pyew, and many in radare2. It's intended to be a multi-architecture disassembler and binary analysis tool, and maybe some day an alternative for commercial alternatives as IDA Pro. Currently, Bokken is neither a hexadecimal editor nor a full featured disassembler, so it should not be used for deep code analysis or for modifying files.
| Tags | binary parsing Debuggers malware binary diffing Disassemblers |
|---|---|
| Licenses | GPLv3 |
| Operating Systems | Linux Windows (32 and 64 bit) MacOS X |
| Implementation | PyGTK Python |
Recent releases


Release Notes: A symlink vulnerability attack in /tmp was fixed. The top menu bar was replaced with a button. This will ease integration of Bokken in Inguma. Some usability bugs were fixed along with some crashes on both Linux and Windows 7. Bokken is now more stable when running from a system-wide installation, like a standard Debian package.


Release Notes: Full support for Radare2. Now you can open Java, mach0, and more ELF variants. The remaining formats supported by radare2 are untested. Disassembly has been enhanced: more precise, with a full dump of sections, symbols, and more. Several new tabs: Flowgraph, File info, Binary diffing, and URL elements. Enhanced support for Web analysis. Awesome code navigation à la HTML. Crossed references and comments in the code. Interactive hexdump. An advanced calculator. An x86 RCE cheat sheet. Many enhancements in the UI, from the general layout to polished details; the interface has had a lot of work.


Release Notes: All the basic features of Pyew are covered in this release.