goresym

{
  "aliases": [],
  "alternatives": [],
  "build_dependencies": [
    "go"
  ],
  "categories": [],
  "caveats": null,
  "conflicts_with": [],
  "dependencies": [],
  "deprecated": 0,
  "deprecation_reason": null,
  "desc": "Go symbol recovery tool",
  "disable_reason": null,
  "disabled": 0,
  "enrichment_fetched_at": "2026-06-20T23:38:20+00:00",
  "first_seen": "2026-06-20T23:34:18+00:00",
  "full_name": "goresym",
  "github_default_branch": "master",
  "github_last_commit_at": "2026-06-01T18:55:53Z",
  "github_readme_excerpt": "# GoReSym\n![GoReSym Logo](./goresym_scaled.png)\n\nGoReSym is a Go symbol parser that extracts program metadata (such as CPU architecture, OS, endianness, compiler version, etc), function metadata (start \u0026 end addresses, names, sources), filename and line number metadata, and embedded structures and types. This cross platform program is based directly on the [open source Go compiler](https://github.com/golang/go/tree/master/src/debug/gosym) and runtime code. \n\nThe upstream Go runtime code is extended to handle:\n* stripped binaries\n* malformed unpacked binaries, such as from UPX\n* binaries that split single data ranges across multiple sections\n* the location of the `moduledata` structure\n\n\n# Usage\nRefer to https://www.mandiant.com/resources/blog/golang-internals-symbol-recovery for reverse engineering details and example usage.\n\nYou can download pre-built `linux`, `macos`, and `windows` GoReSym binaries from the [Releases tab](https://github.com/mandiant/GoReSym/releases/).\n\nTo build from source with a recent Go compiler, invoke the Go compiler:\n\n```\ngo build\n```\n\nOnce built invoke GoReSym like this:\n```\nGoReSym.exe -t -d -p /path/to/input.exe\n```\n\nIn this example, we ask GoReSym to recover type names (`-t`), user package names, standard Go package names (`-d`), and input file paths (`-p`) embedded within the file `/path/to/input.exe`. The output looks like this:\n\n```json\n{\n    \"Version\": \"1.14.15\",\n    \"BuildId\": \"Zb9QmokKTiOUgHKmaIwz/wd2rtE3W9PN-um1Ocdzh/qTdqcTY_jVajHy_-TtYv/Z_kJu9M77OjfijEiHMcF\",\n    \"Arch\": \"amd64\",\n    \"TabMeta\": {\n        \"VA\": 5174784,\n        \"Version\": \"1.2\",\n        \"Endianess\": \"LittleEndian\",\n        \"CpuQuantum\": 1,\n        \"CpuQuantumStr\": \"x86/x64\",\n        \"PointerSize\": 8\n    },\n    \"ModuleMeta\": {\n        \"VA\": 5678816,\n        \"Types\": 4845568,\n        \"ETypes\": 5171904,\n        \"Typelinks\": {\n            \"Data\": 5171904,\n            \"Len\": 695,\n            \"Capacity\": 695\n        },\n        \"ITablinks\": {\n            \"Data\": 5174688",
  "github_repo": "mandiant/GoReSym",
  "github_stars": 1011,
  "github_topics": [
    "gsoc-2026"
  ],
  "homepage": "https://github.com/mandiant/GoReSym",
  "homepage_og_description": null,
  "homepage_og_image": null,
  "homepage_title": null,
  "installs_30d": 16,
  "installs_365d": 223,
  "installs_90d": 36,
  "keg_only": 0,
  "keg_only_reason": null,
  "last_seen": "2026-06-20T23:34:18+00:00",
  "license": "MIT",
  "llm_generated_at": null,
  "llm_model": null,
  "name": "goresym",
  "oldnames": [],
  "one_liner": null,
  "optional_dependencies": [],
  "rank_30d": 7329,
  "rank_365d": 7079,
  "rank_90d": 8167,
  "raw_hash": "158b3af8b80f8a84",
  "recommended_dependencies": [],
  "revision": 0,
  "ruby_source_path": "Formula/g/goresym.rb",
  "tap": "homebrew/core",
  "test_dependencies": [],
  "uses_from_macos": [],
  "version_head": "HEAD",
  "version_stable": "3.3",
  "versioned_formulae": [],
  "why_use_this": null
}