Skip to content

Releases: Adam-AtlasSoftware/kraken

Release list

KRAKEN v0.1.0

KRAKEN v0.1.0 Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 23 Oct 00:17
v0.1.0
5015a9f

The first public release of KRAKEN, an open-source reverse-engineering workbench on Ghidra's decompiler. Pre-alpha: expect rough edges and breaking changes. Linux x86_64 is the supported platform; macOS and Windows builds are early previews.

Install

Linux x86_64: everything below includes the Java-free native engine, ready to use.

  • One command (checks SHA256SUMS, no sudo, installs into ~/.local): 
    curl --proto '=https' --tlsv1.2 -fsSL https://raw.githubusercontent.com/Adam-AtlasSoftware/kraken/main/scripts/install.sh | bash
  • AppImage: KRAKEN-0.1.0-x86_64.AppImage. Make it executable and run it; ./KRAKEN-0.1.0-x86_64.AppImage kraken --help runs the command line.
  • Arch Linux: kraken-workbench-bin on the AUR.
  • By hand: kraken-0.1.0-x86_64-unknown-linux-gnu.tar.gz (see INSTALL.txt inside).

macOS (Apple silicon), preview: kraken-0.1.0-aarch64-apple-darwin.tar.gz, ad-hoc signed (not notarized). Uses the Ghidra engine (kraken setup).

Windows x86_64, preview: kraken-0.1.0-x86_64-pc-windows-msvc.zip with kraken.exe, kraken-gui.exe and krakend.exe (not signed yet). The engine sandbox is Linux-only, so analysis on Windows needs KRAKEN_ALLOW_UNCONFINED=1. A self-updating installer is planned.

Check downloads with sha256sum -c SHA256SUMS --ignore-missing, or gh attestation verify <file> --repo Adam-AtlasSoftware/kraken for the build provenance.

What's in it

  • Analyze: functions, decompiler, listing, hex, control-flow graph, cross-references, strings, imports and exports, for ELF (x86-64, x86, ARM, AArch64, RISC-V) and PE (x86, x86-64) with the native engine. The optional Ghidra engine adds Mach-O, more processors and PDB.
  • Patch: assemble an instruction in place, or edit decompiled C and let the assistant plan the byte change. Compare the original and the patched program side by side in a sandboxed emulator, then export a patched copy.
  • AI: an assistant on a local model or a cloud provider, or a terminal agent (Claude Code, Codex, Gemini CLI) over MCP. Every edit, patches included, is logged with its author and run and can be undone per change or per run. Agents only fill in blanks; anything that overwrites your work becomes a proposal.
  • Automate: one command registry behind the CLI (--json), the MCP server, the GUI and the Python module, with a background daemon that keeps projects warm.
  • Rewrite (experimental): translate functions to Rust and check them against the original under emulation.
  • Safety: the decompiler, Ghidra and the emulator run in Landlock-confined processes without network access. No telemetry.

Documentation: the docs/ folder in each archive, or the repository.

Use KRAKEN only on software you are permitted to analyse.

Assets 7
Loading