{"repo":"Squiblydoo/debloat","free":true,"listed":false,"github":"https://github.com/Squiblydoo/debloat","clone":"git clone https://github.com/Squiblydoo/debloat.git","description":"A GUI and CLI tool for removing bloat from executables","language":"Python","stars":455,"topics":["analysis","malware","reverse-engineering"],"license":"BSD-3-Clause","category":"security-tools","readme_excerpt":"Debloat Debloat is a GUI and CLI tool to remove excess garbage from bloated executables. By excess garbage, I mean 100 - 800 MB of junk bytes added to a binary to keep it from going into a sandbox. This method of adding junk is called \"inflating\" or \"pumping\" a binary. Debloat currently handles the 10 most common inflation tactics. Being built with Python, the application can easily be leveraged in other workflows. Currently, debloat is used by CCCS's AssemblyLine and CERT Polska's MWDB. The program can be compiled for Windows, MacOS, Linux. The GUI and CLI have minimal options: it is intended to be as simple as possible and the logic within the program handles the different use cases automatically. Compiled binaries have already been included in the Releases. The debloat can installed using pip install debloat . Use debloat to launch the CLI and debloat-gui to launch the GUI. For advanced users, Debloat can also be imported into other scripts and the processing functions can be called individually. How to use the GUI? The GUI of Debloat intends to be as intuitive as possible. When launched, you can drag and drop bloated file onto the text bar and press the \"Process file\" button. Some technical information will be printed to the scrolling textbox and the file without bloat will be written to the directory the file was pulled from. Sound easy? It is! Processing files will take a few seconds. How to use the CLI? After installing using pip install debloat use the command debloat","default_branch":null,"files":null,"tree":[],"storefront":"/r/Squiblydoo","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/Squiblydoo/debloat/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}