Skip to content
exav

exav

Memory-safe tools for untrusted files. Scan them for malware, unpack them, and view them in the browser.
Malware scanningArchive extractionFile viewer

exav is a set of tools for files you did not write and should not trust: an attachment, an upload, a download. They are built on the same parsers, written in safe Rust, and each bounds the work a hostile file can cause. Each tool is usable on its own.

Malware scanning

A ClamAV-compatible scanner, daemon and ICAP server that never reports a file clean unless it fully scanned it.

Terminal window
cargo install exav

Start here or read the comparison with ClamAV

Archive extraction

Bounded, memory-safe extraction of archives, disk images and documents, as a command, a Rust crate, and @exav/unpack-wasm for browsers and Node.

Terminal window
cargo install exav-unpack

Start here

File viewer

@exav/viewer shows PDF, images, DWG and DXF, Office documents, IFC and STL models, media and archives in the browser, and can open each file in a sandboxed frame of its own.

Terminal window
npm install @exav/viewer

Start here or try the demo

Subprojects and About

Section titled “Subprojects and About”
Subprojectsexav-grep, exav-imagehash, exav-pe-emu, exav-core as a library, exav-render, exav-x86 and exav-update.
Technical architectureHow the crates and the WebAssembly packages depend on each other.
SecurityReporting a vulnerability, the threat model, and where each tool's safety model is documented.
ContributingThe clean-room rule, the checks to run, and the 32-bit/WASM tests.