Avatar² vs Boomerang

Avatar² is a free Python framework for dynamic analysis of embedded-device firmware. It coordinates targets, memory layouts and execution plans so firmware execution can be divided across multiple targets. Targets communicate through protocols with emulators, analysis frameworks or physical devices. The handbook documents GDB, OpenOCD, J-Link, QEMU and PANDA targets. OpenOCDTarget connects to physical targets over JTAG, while JLinkTarget supports SWD and JTAG. PANDA support includes recording and replaying execution and managing analysis plugins. Memory layouts define regions and rules for forwarding reads and writes between targets. The project documents installation through pip, from source or in Docker, where QEMU and PANDA are the defaults. It lists Linux support and ARM Cortex-M3 and x86-64 architectures. The README provides target build scripts for Ubuntu 20.04; other distributions are not officially supported, though they may work with modifications. The project uses the Apache-2.0 license and is maintained by EURECOM's Software and System Security Group. Maintainers direct users to a public mailing list and an invite-based Slack community.

Boomerang is an open-source decompiler that translates supported machine-code binaries into C source code. It supports x86 (IA-32 only), PPC, and ST20 architectures, and accepts ELF, PE, DOS MZ, DOS/4GW LE, and Mach-O files. Users can run it as a command-line tool or a GUI application. The project describes its license as BSD, and the software is free. Build instructions cover Linux, macOS, and Windows, but compiling requires a 64-bit operating system and a C++17 compiler; 32-bit systems are not supported. Documented prerequisites include CMake, Qt5, Capstone, GNU bison, and GNU flex. Precompiled packages are available for release versions, although the project recommends building the development branch from source. Unit and regression tests are provided, but the README says the regression test suite cannot be built on Windows. The maker describes the release as intended for developers and experimenters and warns that large-binary decompilation may disappoint. Decompiled output does not recreate the original source file and may differ from it. The project directs users to its GitHub issue tracker for bug reports.