BAP (Binary Analysis Platform) vs CFR
BAP (Binary Analysis Platform)
binaryanalysisplatform.github.ioCFR
benf.orgSide by side
| Figure | BAP (Binary Analysis Platform) | CFR |
|---|---|---|
| Price from | Free | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Windows | — | Yes |
| macOS | — | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 1 |
| Spec score · Reverse Engineering Tools | 8.7 (#3) | 8.2 (#10) |
| License | The GitHub repository identifies the project license as MIT. | The maker’s FAQ directs users to the project README for its license; the project repository identifies the license as MIT. |
| Purpose | BAP is a suite of utilities and libraries for analyzing binary programs. | CFR is a Java decompiler that converts Java class files back into Java source. |
| Support | The installation instructions direct users who encounter missing system dependencies to the project's chat for help. | The maker invites users to email reports of problems and directs bug reports to the GitHub issue tracker. |
Plans
In their own words
BAP (Binary Analysis Platform)
BAP (Binary Analysis Platform) has no write-up on Specifiction yet; its figures are above.
CFR
CFR is a free Java decompiler that reconstructs Java source from Java class files. It can process individual named classes, classes found on a classpath, or a whole JAR, and the command-line tool can place output in a chosen directory with the --outputdir option. Decompilation behavior can be adjusted through command-line options or an options file. The maker says CFR handles many features from Java 9, 12, and 14, and it can attempt class files from other JVM languages; those are rendered as Java rather than their original language. CFR is written in Java 6 and is said to run wherever Java 6 does. It is available as a downloadable JAR, through Maven, and from GitHub. The FAQ notes an API from version 0.135, and the project repository identifies the license as MIT. CFR handles bytecode rather than native code. Its maker also notes that some inputs fall into edge cases where output may be poor. There are no paid plans or usage limits stated.