ImHex

Inspect, edit, and analyze raw binary files, firmware, and data structures with a visual hex editor.

Inspect, edit, and analyze raw binary files, firmware, and data structures with a visual hex editor.

The gist

ImHex is an open-source hex editor (tool to view raw bytes) and reverse-engineering workspace. It is built for security researchers, software developers, and engineers who need to inspect binaries, firmware, or custom file formats. It provides a modern desktop interface to decode, patch, and analyze low-level data without damaging the original files.

What it does

  • Views raw file data in hexadecimal and text formats side by side
  • Decodes binary structures using a custom pattern language
  • Edits and patches individual bytes with full undo and redo history
  • Searches files for specific text strings, byte sequences, and patterns
  • Runs on Windows, macOS, and Linux, with an optional web-based version

How it works

Architecture Diagram
ImHex Architecture Diagram

You open an executable file, disk image, or raw data file inside the application. The editor displays the byte stream alongside decoded values and structural patterns. Analysis tools and parsers process the data to highlight sections and reveal hidden structure. You can then search, modify bytes, or export the resulting file.

Best for

  • Software developers reverse-engineering undocumented file formats or network dumps
  • Security analysts inspecting suspicious programs, firmware, or binary files
  • Engineers who need to patch raw bytes and test data decoders

Watch out for

  • High learning curve if you are unfamiliar with binary data, memory layouts, or hex representations
  • Not meant for day-to-day text editing or standard office documents
  • Advanced features like custom pattern scripts require technical knowledge to write

What you need: Install it on your own computer. Cost: free, open source.