Life & fun · alternatives · 2026

24 alternatives to Another ELF Analysis Toolkit

Nyxelf simplifies static and dynamic analysis of ELF binaries, enabling you to extract valuable insights effortlessly. And can be used for vulnerability assessments, unpacking, syscall tracing, and memory analysis.

Nyxelf is a toolkit designed for analyzing ELF binaries through both static and dynamic approaches. It helps security researchers and developers perform vulnerability assessments, unpack binaries, trace system calls… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.

1. 1
   A (marginally) useful x86-64 ELF executable in 466 bytes▲85

   Battery info program for x86-64 Linux laptops in 307 bytes of machine code - meribold/btry

   2024 · github.com · its alternatives →

2. 2
   Xcapture-BPF – like Linux top, but with Xray vision▲447

   Always on Profiling for Production Systems

   2024 · 0x.tools · its alternatives →

3. 3
   Xcc700: Self-hosting mini C compiler for ESP32 (Xtensa) in 700 lines▲154

   Repo: https://github.com/valdanylchuk/xcc700 Hi Everyone! I just wrote my first compiler! - single pass, recursive descent, direct emission - generates REL ELF binaries, runnable using ESP-IDF elf_loader - very basic features only, just enough for self-hosting - treats the Xtensa CPU as a stack machine for simplicity, no register allocation / window usage - compilable on Mac, probably also Linux, can cross-compile for esp32 there - wrote for fun / cyberdeck project Sample output from esp32: xcc700.elf xcc700.c -o /d/cc.elf [ xcc700 ] BUILD COMPLETED >…

   Dec 2025 · github.com · its alternatives →

4. 4
   Hexel Editor▲78

   Native macOS hex editor with a brain for file formats

   Aug 2026 · apps.apple.com · its alternatives →

5. 5
   Compare Analysis Tools For Python, Ruby, C, PHP, Go▲175

   Find static code analysis tools and linters for Java, JavaScript, PHP, Python, Ruby, C/C++, C#, Go, Swift, and more. All tools and linters are peer-reviewed by fellow developers to select the best tools available. Avoid bugs in production, outages on weekends, and angry customers.

   2020 · analysis-tools.dev · its alternatives →

6. 6
   Spall – WASM-based profiler for JavaScript and C and Odin▲83

   [I'm the author] Spall is a web-accessible profiler that I made to help my web-dev friends load gigabyte+ JSON traces without lunch-break-long load times. Recently, Spall got experimental support for auto-tracing with binary traces (along with an in-progress native-port, to give it more memory headroom), which was used to help track down and fix some hard-to-spot lock contention issues in the Odin-language compiler. I demoed it at the Handmade Seattle conference in October, https://guide.handmade-seattle.com/c/2022/spall/, with a head-to-head against Perfetto,…

   2023 · gravitymoth.com · its alternatives →

7. 7
   An experimental data-flow analysis tool for JavaScript▲95

   Find the origin of any character in the DOM

   2019 · fromjs.com · its alternatives →

8. 8
   Shed Light on Your Go Binary Bloat with Go Size Analyzer▲87

   I've created a powerful tool to help Go developers uncover the hidden giants in their compiled binaries. Go Size Analyzer is like an X-ray machine for your Go executables, revealing: Which dependencies are eating up your binary size Unexpected bloat from standard library or vendor packages Size changes between binary versions with a visual diff Key features that set it apart: Interactive treemap visualizations (check out the demo: https://gsa.zxilly.dev) Slick terminal UI for deep diving into package hierarchies Cross-platform support (works on Linux, macOS, and Windows binaries)…

   2024 · github.com · its alternatives →

9. 9
   Open Source Suite for Binary Analysis, Based on QEmu and LLVM▲46

   Next-gen decompiler.

   2018 · rev.ng · its alternatives →

10. 10GO
    Globstar – Open-source static analysis toolkit▲103

    Hey HN! We’re Jai and Sanket, co-founders of DeepSource (YC W20). We're open-sourcing Globstar (https://github.com/DeepSourceCorp/globstar), a static analysis toolkit that lets you easily write and run custom code quality and security checkers in YAML [1] or Go [2]. After 5+ years of building AST-based static analyzers that process millions of lines of code daily at DeepSource, we kept hearing a common request from customers: "How do we write custom checks specific to our codebase?" AppSec and DevOps teams have a lot of learned anti-patterns and security rules they want…

    2025 · its alternatives →

11. 11
    Fenix – Rust toolchains and Rust-analyzer nightly for Nix▲15

    Rust toolchains and rust-analyzer nightly for Nix [maintainers=@figsoda, @eureka-cpu] - nix-community/fenix

    2023 · github.com · its alternatives →

12. 12
    Memleax – detects memory leak of a running process▲42

    debugs memory leak of running process. Not maintained anymore, try `libleak` please. - WuBingzheng/memleax

    2016 · github.com · its alternatives →

13. 13
    Linnix – eBPF observability that predicts failures before they happen▲21

    I kept missing incidents until it was too late. By the time my monitoring alerted me, servers/nodes were already unrecoverable. So I built Linnix. It watches your Linux systems at the kernel level using eBPF and tries to catch problems before they cascade into outages. The idea is simple: instead of alerting you after your server runs out of memory, it notices when memory allocation patterns look weird and tells you "hey, this looks bad." It uses a local LLM to spot patterns. Not trying to build AGI here - just pattern matching on process behavior. Turns out LLMs are actually pretty…

    Nov 2025 · github.com · its alternatives →

14. 14
    Binspector – A Binary Format Analysis Tool▲45

    Binary formats and files are inescapable. Although optimal for computers to read, sussing them manually requires exacting patience. Every developer …

    2014 · binspector.github.io · its alternatives →

15. 15
    Xeger – A semantic regex builder in JavaScript▲14

    More verbose and readable regular expressions. Contribute to JonAbrams/xeger development by creating an account on GitHub.

    2015 · github.com · its alternatives →

16. 16
    Rust framework for advanced file recognition and identification▲46

    Alternative to magic.h and infer. Zero dependencies. Fully extensible. Works in no_std, async, and embedded contexts.

    2025 · crates.io · its alternatives →

17. 17
    LLM, a Rust Crate/CLI for CPU Inference of LLMs (LLaMA, GPT-NeoX, etc.)▲45

    G'day, HN! I'm one of the maintainers of `llm`. I've been working alongside a trusty group of contributors to bring this project to life, and we're now at a point where we're ready to share it with the world. Large language models (LLMs) are taking the computing world by storm due to their emergent abilities that allow them to perform a wide variety of tasks, including translation, summarization, code generation, and even some degree of reasoning. However, the ecosystem around LLMs is still in its infancy, and it can be difficult to get started with these models. `llm` is a one-stop shop for…

    2023 · github.com · its alternatives →

18. 18
    MicroSCOPE▲5

    Static analysis tool that detects potential ransomware in PE and ELF files through heuristic analysis - seekbytes/MicroSCOPE

    2023 · github.com · its alternatives →

19. 19JR
    Jibril – Runtime security monitoring and enforcement for modern infra▲20

    Jibril is a runtime security monitoring and enforcement tool. It introduces a new architecture designed to overcome limitations of previous-generation runtime security tooling and EDRs, which were primarily built for traditional endpoints and long-running containerized workloads. Jibril introduces an event-less architecture leveraging eBPF to maintain lightweight state maps directly within the kernel. Instead of buffering events, it queries kernel state directly, enabling real-time detection and enforcement with minimal overhead. This approach is especially effective for protecting ephemeral…

    2025 · garnet.ai · its alternatives →

20. 20
    BrowserTotal: A framework for analyzing browser security posture▲28

    Live extension analysis: Point us at a Chrome/Edge/Firefox extension (store URL or CRX). We spin up a safe sandbox and observe it in real time—permissions use, message passing, storage writes, network calls, remote code loading, and UI injections. Package scanning: Paste an npm/package URL or code. We do quick static + dynamic checks: install/postinstall scripts, obfuscation/eval, exfil endpoints, suspicious APIs, and typosquat/reputation signals. AI explainer: An LLM summarizes the behaviors and risk patterns in plain English (why it’s risky, what to verify,…

    2025 · browsertotal.com · its alternatives →

21. 21
    Local-first firmware analyzer using WebAssembly▲8

    Hi HN, I just wanted to share what I have been working on for the past few months: A firmware analyzer for embedded Linux systems that helps uncovering security issues running entirely in the browser. This is a very early Alpha. It is going to be rough around the edges. But I think it provides quite a lot of value already. So please go ahead and drop a firmware (only .tar rootfs archives for now) and try to break it :)

    Mar 2026 · xray.boldwark.com · its alternatives →

22. 22
    Xcover, test coverage without instrumentation, using eBPF▲6

    xcover started as a personal project, and we've already started using it internally at Chainguard to profile the test coverage of our packages. It measures function coverage, without instrumentation required at compile time, so that you can test the the binaries that you ship. It works with any ELF. This helps when you can't produce a coverage build, or when you have packages in several languages and don't want a separate coverage tool for each. I'm also experimenting with userspace eBPF runtimes to remove the cost of the kernel traps, while also enabling unprivileged mode of xcover.…

    Jul 2026 · github.com · its alternatives →

23. 23EL
    Elfconv – Linux Apps to High-Performance WASM Binary Translator▲18

    This post introduces elfconv, a binary translator that converts Linux applications into WebAssembly. repo: https://github.com/yomaytk/elfconv Recently, performance has improved dramatically. In our LINPACK benchmark, the Wasm generated from ELF/AArch64 by elfconv now runs at roughly 60–80% of the performance of the Wasm directly compiled from source code. This shows that elfconv can produce WebAssembly with practical, real‑world performance! Furthermore, compared to QEMU running in the browser, it achieves approximately 68× the performance. Benchmark test:…

    2025 · medium.com · its alternatives →

24. 24
    Rust built open-sourced CLI tool for API specification validation▲23

    Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests. - blst-security/cherrybomb

    2022 · github.com · its alternatives →

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →