Security is paramount when handling unknown binaries. Lib.so executes all binary emulation and analysis within ephemeral containers. These containers are firewalled and destroyed after the session ends, protecting the host infrastructure and ensuring that potential malware samples cannot propagate.
URL: dogbolt.org
Supported engines: Hex-Rays, Ghidra, Binary Ninja, RetDec, Angr, etc.
Best for: Comparing multiple decompiler outputs simultaneously.
Pros:
Cons:
Use case: Reverse engineer an obfuscated algorithm in a mobile game’s .so. Lib.so Decompiler Online
URL: Various public instances (e.g., ghidra-online.com – check current status)
Best for: Accurate function recovery and scriptable analysis.
Pros:
Cons:
Workaround: Many researchers run Ghidra locally but expose it via a web interface for team collaboration. Security is paramount when handling unknown binaries