Peek-a-Bin
Browser-based PE disassembler. All analysis client-side via WebAssembly.
Live Demo
Features
- PE Analysis — headers, sections, imports, exports, resources, authenticode signatures
- Disassembly — x86/x64 via Capstone WASM with hybrid recursive descent + linear sweep, jump arrows, minimap
- ARM64 — PE32+ ARM64 images disassemble via a fixed-width sweep, with A64-aware CFG, jump arrows and cross-references; the decompiler is x86-only and says so rather than guessing. An image whose machine type has no decoder here (ARM32/Thumb, IA-64, RISC-V, MIPS) is refused visibly instead of being decoded as x86, and still shows its headers, sections, imports, exports, resources and strings
- Decompiler — IR-based built-in decompiler with SSA, type inference, and struct synthesis; optional Ghidra server for high-level output
- Control Flow Graph — inline IDA-style graph view with collapsible blocks, keyboard navigation, and pan/zoom
- AI-Powered Analysis — chat, and enhance/explain in the decompile panel (bring your own API key)
- Kernel Driver Analysis —
.sys driver detection, suspicious API flagging, IOCTL decoder, IRP dispatch table
- Annotations — bookmarks, renames, comments with undo/redo and export/import
- Cross-References — function calls, strings, imports, data section references
- Anomaly Detection — flags WX sections, packer indicators, disabled ASLR/DEP, and more
- Hex View — hex dump with data xref indicators
- Offline / PWA — installable, works fully offline after first visit
- Theming — 4 built-in themes + custom theme import/export
- MCP Server — AI agent integration via Model Context Protocol
Quick Start
Requires Node.js 20+.
git clone https://github.com/wellingtonlee/peek-a-bin.git
cd peek-a-bin
npm install
npm run dev
# http://localhost:5173/peek-a-bin/
Documentation
| Guide | Description |
|---|
| Keyboard Shortcuts | All hotkeys and navigation |
| Theming | Themes, custom colors, font size |
| AI Features | Chat, enhance/explain, LLM profiles |
| Ghidra Server | Optional high-level decompilation server |
| MCP Server | AI agent integration tools and resources |
| Architecture | State management, worker, rendering pipeline |
| Decompiler | IR system, SSA, type inference, struct synthesis |
| Deployment | Docker, GitHub Pages, PWA, self-hosting |
Tech Stack
- React 19, TypeScript 5.7, Vite 6
- Tailwind CSS 4
- capstone-wasm (Capstone disassembly engine compiled to WASM)
- @tanstack/react-virtual (virtual scrolling)
- @dagrejs/dagre (graph layout)
- vite-plugin-pwa (service worker and offline caching)
- Vitest (unit testing)
- Web Workers for off-main-thread disassembly
Contributing
See CONTRIBUTING.md for development setup, code style, and PR guidelines.
License
MIT
