Repolode
Submit
WerWolv

WerWolv/ImHex

A cross-platform hex editor for reverse engineering and binary analysis, with a pattern language for parsing file structures.

Open-source alternative to:010 EditorHxD

View on GitHubWebsite
Stars
55,503
Forks
2,560
Open issues
415
Last commit
13 days ago

What is it?

ImHex is a hex editor aimed at reverse engineers, programmers, and anyone inspecting binary files. It runs on Windows, macOS, Linux, and FreeBSD, with a dark theme by default and a light theme available.

Beyond raw byte editing with patching and undo/redo, ImHex includes a custom C-like Pattern Language for describing structs, unions, enums, and bitfields so a file's contents can be parsed and highlighted automatically. It also provides a data inspector, a node-based data processor for decoding or decrypting data before display, and an integrated disassembler built on Capstone that supports many CPU architectures.

Analysis tools cover entropy graphs, hashing with many algorithms, file diffing, string and numeric search, and YARA rule scanning. Data can be loaded from local files, raw disks, processes, SSH/SFTP remotes, UDP streams, and GDB servers.

Key features

  • 01Hex editing with byte patching, infinite undo/redo, and bookmarks
  • 02C-like Pattern Language for parsing and highlighting binary structures
  • 03Integrated disassembler based on Capstone supporting many architectures
  • 04Entropy graphs, file diffing, and a wide range of hash algorithms
  • 05YARA rule scanning with match highlighting
  • 06Loads data from files, raw disks, process memory, SSH/SFTP, and GDB servers

Use cases

  • Reverse engineering unknown binary file formats
  • Inspecting firmware or embedded device memory over GDB
  • Scanning suspicious files with YARA rules during malware analysis
  • Comparing two binaries to find changed bytes

Quick start

  1. 1

    Download the latest release from imhex.download

  2. 2

    Or try the web version in your browser

Things to know

  • Licensed under GPL-2.0, a copyleft license that requires derivative works to be open source under the same terms.

Topics

#hex-editor#reverse-engineering#binary-analysis#disassembler#cpp#cybersecurity#forensics#analyzer#c-plus-plus#dark-mode

FAQ

What is ImHex?
A cross-platform hex editor for reverse engineering and binary analysis, with a pattern language for parsing file structures. ImHex is a hex editor aimed at reverse engineers, programmers, and anyone inspecting binary files. It runs on Windows, macOS, Linux, and FreeBSD, with a dark theme by default and a light theme available.
Is ImHex free to use? What license does it have?
ImHex is open source under the GPL-2.0 license. Check the license terms before using it in commercial products.
Is ImHex still maintained?
Actively maintained. The last commit to ImHex was on Oct 9, 2026.
What can I use ImHex for?
Reverse engineering unknown binary file formats Inspecting firmware or embedded device memory over GDB Scanning suspicious files with YARA rules during malware analysis Comparing two binaries to find changed bytes
How do I install ImHex?
Download the latest release from imhex.download Or try the web version in your browser
Where can I get ImHex?
The source code and installation instructions are on GitHub: https://github.com/WerWolv/ImHex

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects