unicorn
« Back to VersTracker
Description:
Lightweight multi-architecture CPU emulation framework
Type: Formula  |  Tracked Since: Dec 28, 2025
Links: Homepage  |  formulae.brew.sh
Category: Security
Tags: emulation security reverse-engineering qemu fuzzing
Install: brew install unicorn
About:
Unicorn is a lightweight, multi-architecture CPU emulation framework based on QEMU. It provides a clean API for instrumenting and executing arbitrary binary code, supporting architectures like ARM, MIPS, x86, and PowerPC. Its main value proposition is offering a secure and fast foundation for building security tools, such as malware analyzers and debuggers.
Key Features:
  • Multi-architecture support (ARM, MIPS, x86, PowerPC, etc.)
  • Clean, lightweight API for easy integration
  • High performance with fine-grained instrumentation
  • Bindings for Python, Go, Rust, and other languages
Use Cases:
  • Building custom malware analysis sandboxes
  • Creating hardware-based fuzzers
  • Emulating firmware for embedded devices
  • Developing cross-architecture debuggers
Alternatives:
  • QEMU – Unicorn is a library fork of QEMU, offering a much simpler API focused on emulation-as-a-library, whereas QEMU is a full system emulator.
  • Frida – Frida is a dynamic instrumentation toolkit, while Unicorn is a pure CPU emulator; they are often used together for advanced analysis.
Version History
Detected Version Rev Change Commit
Sep 11, 2025 5:02pm 0 VERSION_BUMP e5737044
Sep 11, 2025 1:16pm 0 VERSION_BUMP 644b2154
Sep 9, 2025 11:41am 0 VERSION_BUMP c6538980
Sep 26, 2024 3:45pm 0 VERSION_BUMP 515a3254
Sep 26, 2024 11:25am 0 VERSION_BUMP 5c25e683
Sep 22, 2024 2:15pm 0 VERSION_BUMP 60f0f459
Sep 22, 2024 9:42am 0 VERSION_BUMP c574cf7d