No. 39 of 73 ·Reverse Engineering Tools

DRAKVUF

Linux · Self-hosted

Visit site Alternatives

Freedom report

One barScore 5.3

Free tierNo free tier on record
Open codeNo open-source code on record
Runs widely1 of 6 device platforms
DocumentedPlans, terms and facts published

DRAKVUF is ranked #39 of 73 in reverse engineering tools on Freedom251. It runs on Linux, Self-hosted.

Compared on reverse engineering tools

API or CLI access: Yes
Deployment: self_hosted

Best DRAKVUF alternatives

See all 20

Two bars Frida Free tier No. 1Free6.7 Two bars radare2 Free tier No. 2Free6.7 Two bars Rizin Free tier No. 3Free6.7 Two bars Binary Ninja Free tier No. 4Free6.6 Two bars IDA Pro Free tier No. 5$91.58/mo6.6 Two bars JEB Free tier No. 6$100/mo6.6

The record

Product: DRAKVUF is a virtualization-based, agentless black-box binary analysis system for tracing arbitrary binaries, including operating systems.
Malware analysis: The site says DRAKVUF was developed mainly for malware analysis and can also monitor arbitrary binaries.
Agentless monitoring: Available features include agentless monitoring of Windows and Linux kernel functions and Windows userspace.
Execution and files: DRAKVUF can start binary execution on Windows and Linux and insert files into Windows without an in-guest agent.
Plugins: Windows plugins can trace heap allocations, accessed files, TCP and UDP connections, and extract files from memory before deletion.
Integration: The site identifies IntelOwl as an example of malware-analysis operations integration and mentions automatic VirusTotal submission as an opportunity to extend the project.
Stealth: The site describes DRAKVUF as suitable for stealthy malware analysis because its footprint is nearly undetectable from the malware’s perspective.
Hardware requirement: DRAKVUF requires an Intel CPU with VT-x and Extended Page Tables; the site says it does not work on AMD CPUs or Intel CPUs lacking those extensions.
Guest support: The site lists Windows 7–8 in 32-bit and 64-bit, Windows 10 64-bit, and Linux 2.6.x–5.x in 32-bit and 64-bit as supported guests.
Virtualization: The installation guide says DRAKVUF runs best on Xen 4.17 and was mainly tested on Ubuntu 22.04 LTS.
Downloads: The site links to pre-built Debian packages for the latest DRAKVUF builds and provides source-build instructions for Debian- and Ubuntu-based Linux distributions.
Support and contributions: The site welcomes patches and bug reports through its GitHub project page and points users to the project wiki for guidance.

Where it ranks on Freedom251

Best Reverse Engineering Tools in 2026#39 of 73
Best Sandbox Software in 2026#18 of 22

Is DRAKVUF yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote DRAKVUF

Sources

drakvuf.com· checked 4 Oct 2026