DRAKVUF

5.0easy start · #71 of 73
in Reverse Engineering Tools

Free to practise onnot on record
Free trialnot on record
Well documentednot on record
Runs where you worknot on record

Runs on Linux, self-hosted.

Visit site Alternatives

DRAKVUF is ranked #71 of 73 in reverse engineering tools on The Geeks Club. It runs on Linux, Self-hosted.

Compared on reverse engineering tools

API or CLI access: Yes
Deployment: self_hosted

Best DRAKVUF alternatives

See all 12

JEB 0 of 4 in the starter kit Lesson 17.9 Qiling Framework 0 of 4 in the starter kit Lesson 27.4 radare2 0 of 4 in the starter kit Lesson 37.4 rev.ng 0 of 4 in the starter kit Lesson 47.4 Rizin 0 of 4 in the starter kit Lesson 57.4 Binary Ninja 0 of 4 in the starter kit Lesson 67.3

The record

Product: DRAKVUF is a virtualization-based, agentless black-box binary analysis system for tracing arbitrary binaries, including operating systems.
Malware analysis: The site says DRAKVUF was developed mainly for malware analysis and can also monitor arbitrary binaries.
Agentless monitoring: Available features include agentless monitoring of Windows and Linux kernel functions and Windows userspace.
Execution and files: DRAKVUF can start binary execution on Windows and Linux and insert files into Windows without an in-guest agent.
Plugins: Windows plugins can trace heap allocations, accessed files, TCP and UDP connections, and extract files from memory before deletion.
Integration: The site identifies IntelOwl as an example of malware-analysis operations integration and mentions automatic VirusTotal submission as an opportunity to extend the project.
Stealth: The site describes DRAKVUF as suitable for stealthy malware analysis because its footprint is nearly undetectable from the malware’s perspective.
Hardware requirement: DRAKVUF requires an Intel CPU with VT-x and Extended Page Tables; the site says it does not work on AMD CPUs or Intel CPUs lacking those extensions.
Guest support: The site lists Windows 7–8 in 32-bit and 64-bit, Windows 10 64-bit, and Linux 2.6.x–5.x in 32-bit and 64-bit as supported guests.
Virtualization: The installation guide says DRAKVUF runs best on Xen 4.17 and was mainly tested on Ubuntu 22.04 LTS.
Downloads: The site links to pre-built Debian packages for the latest DRAKVUF builds and provides source-build instructions for Debian- and Ubuntu-based Linux distributions.
Support and contributions: The site welcomes patches and bug reports through its GitHub project page and points users to the project wiki for guidance.

Where it ranks on The Geeks Club

Best Reverse Engineering Tools in 2026#71 of 73
Best Sandbox Software in 2026#22 of 22

Is DRAKVUF yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote DRAKVUF

Sources

drakvuf.com· checked 4 Oct 2026