Zelos - A Comprehensive Binary Emulation Platform

[ESCO]

Zelos (Zeropoint Emulated Lightweight Operating System) is a python-based binary emulation platform. One use of zelos is to quickly assess the dynamic behavior of binaries via command-line or python scripts. All syscalls are emulated to isolate the target binary. Linux x86_64 (32- and 64-bit), ARM and MIPS binaries are supported. Unicorn provides CPU emulation.

Installation
Use the package manager pip to install zelos.

Code:
pip install zelos

Basic Usage
Command-line
To emulate a binary with default options:

Code:
zelos my_binary

To view the instructions that are being executed, add the -v flag:

Code:
zelos -v my_binary

You can print only the first time each instruction is executed, rather than every execution, using --fasttrace:

Code:
zelos -v --fasttrace my_binary

By default, syscalls are emitted on stdout. To write syscalls to a file instead, use the --strace flag:

Code:
zelos --strace path/to/file my_binary

Specify any command line arguments after the binary name:

Code:
zelos my_binary arg1 arg2

Programmatic

Code:
import zelos
z = zelos.Zelos("my_binary")
z.start(timeout=3)

Download Zelos