Brovan: Windows & Linux Emulator for reverse engineering
Source Reddit BlueTeam
Discussion
Brovan is a user-mode x86_64 binary emulator designed for reverse engineering and malware analysis. It supports emulation of Windows PE binaries, Linux ELF binaries, memory dumps, and even raw or unrecognized binaries. The tool allows interactive inspection of execution, syscall and function tracing, and controlled sandboxed execution without running code directly on the host CPU. It also captures emulated network traffic for analysis. Brovan aims to facilitate flexible binary research by providing full control over execution and runtime behavior in a contained environment. It is currently in early stages but actively developed and available as open source.
r/blueteamsec (opens in a new tab)u/AhmedMinegames0 points0 comments
After months of work, I’m excited to finally share Brovan, my user-mode binary emulator.
Brovan can emulate:
- PE binaries
- ELF binaries
- Memory dumps
- Even partially unknown or unrecognized binaries
The goal is to make binary analysis, malware analysis and general binary research more flexible by giving full control over execution, memory, and runtime behavior in a contained environment. You can fully control and see everything the program does. Every syscall, function and network traffic.
it can also run windows programs on linux and vice versa, although it is still in the early stages it will be improved.