ant4g0nist/pyre

Pyre is a browser-based binary decompiler, a tool that takes compiled executable files and converts them back into readable C-like code so security researchers and reverse engineers can understand what a program does without access to its original source code. It runs entirely in your browser, with no server, no file upload, and no telemetry, your binaries never leave your machine. The decompilation engine is Ghidra's decompiler (a well-respected open-source decompiler from the NSA), compiled to WebAssembly (a format that allows native-speed code to run in browsers) so it can execute client-side. When you drag an executable file into the browser, Pyre parses the file format (ELF for Linux, Mach-O for macOS, PE for Windows, or WebAssembly modules), loads the appropriate architecture specification for the processor type, and decompiles individual functions on demand. The interface uses a code editor (Monaco, the same editor that powers VS Code) to display the decompiled output. You can navigate between functions in a list, click on function call sites to follow them into new tabs, and view cross-references in a side panel. Currently it supports x86 (both 32-bit and 64-bit), AArch64 (modern ARM chips), and WebAssembly modules. Support for additional architectures like RISC-V, MIPS, and PowerPC is planned. The project is in alpha and requires building from source or using the provided Docker image.