Glaurung
softwareAn active reverse-engineering framework with a Rust analysis core, Python API, persistent project databases, and optional agent-assisted workflows. One of the top deterministic decompilers on the DecBench sample set.
Glaurung is a pre-1.0 reverse-engineering framework for automated binary triage and analysis, documented at glaurung.dev. It combines a Rust core with Python bindings, a command-line interface, persistent SQLite project files, and optional agent-assisted workflows.
Current capabilities
- ELF, PE/COFF, and Mach-O triage, including symbols, strings, indicators, entropy, packer signals, and hardening metadata
- Bounded disassembly for x86, x86-64, ARM, ARM64, and RISC-V
- Function discovery, control-flow and call graphs, cross-references, stack analysis, type propagation, DWARF ingestion, and PE/PDB support
- Developing C-like pseudocode through an LLIR, SSA, and AST pipeline
- Scriptable CLI and Python API with persistent names, types, comments, bookmarks, and analysis journals
DecBench standing
Glaurung is one of the top deterministic decompilers on DecBench, the University of Georgia Noelo Lab’s living benchmark for exact source recovery. Its deterministic backend was added as an external submission in August 2026 and is scored on the 250-function sample set.
As of the 2026-08-29 scoreboard snapshot, Glaurung ranks 3rd of 13 on the sample set by Union, the share of functions with a perfect score on at least one metric. The only entries above it are the Codex and Claude Code LLM agents, which cost dollars per function and do not recompile. Among traditional decompilers it leads Hex-Rays, angr, Kuna, Binary Ninja, and Ghidra.
| Metric | Glaurung | Best other traditional decompiler |
|---|---|---|
| Union (any perfect) | 32.8% | 29.2% (Hex-Rays) |
| Structure (GED) | 28.0% | 26.4% (Hex-Rays) |
| Types | 9.4% | 8.1% (Binary Ninja) |
| Recompile byte match | 2.1% | 2.1% (Manifold) |
Every one of its 158 recompilable outputs compiled, and it reported no decompilation failures on any of the 250 functions. Ventris, a closed-source decompiler from RevEng.AI, sits one function behind at 32.4%. Rankings shift as DecBench adds decompilers and repairs metrics, so the live leaderboard is authoritative. Full-corpus results across all 94,575 functions are in preparation.
The decompiler is experimental, and its output should be checked against disassembly and runtime behavior. Glaurung is useful today as an open, programmable analysis framework rather than a finished replacement for mature interactive tools.