pe-file

There are 3 repositories under pe-file topic.

hasherezade / pe-bear
Portable Executable reversing tool with a friendly GUI
bearparser malware-analysis multiplatform pe-analyzer pe-analyzer-gui pe-editor pe-file pe-format
Language:C++ 3258
hasherezade / pe_to_shellcode
Converts PE into a shellcode
pe-to-shellcode pe2shellcode shellcode pe-file pe2shc shellcode-development
Language:C++ 2648
hasherezade / libpeconv
A library to load, manipulate, dump PE files. See also: https://github.com/hasherezade/libpeconv_tpl
libpeconv manual-mapping pe-file pe-format pe-loader
Language:C++ 1278
hasherezade / dll_to_exe
Converts a DLL into EXE
libpeconv dll2exe dll-to-exe pe-file
Language:C++ 815
mentebinaria / readpe
The PE file analysis toolkit
binary-analysis malware-analysis malware-research pe-file portable-executable reverse-engineering
Language:C 720
saferwall / pe
A :zap: lightweight Go package to parse, analyze and extract metadata from Portable Executable (PE) binaries. Designed for malware analysis tasks and robust against PE malformations.
pe-file portable-executable malware pe coff pe-malformations malware-analysis parsing go golang parser binary-analysis reverse-engineering pe-format
Language:Go 368
hasherezade / IAT_patcher
Persistent IAT hooking application - based on bearparser
pe iat hooking multiplatform iat-hooking pe-file pe-format bearparser
Language:C++ 254
HoShiMin / formatPE
A bunch of parsers for PE and PDB formats in C++
cpp header-only modern-cpp pdb pdb-files pdb-parser pdb-structure pe pe-analyzer pe-applications pe-file pe-format portable-executable pe-parser
Language:C++ 237
jovibor / libpe
Library for parsing internal structures of PE32/PE32+ binary files.
pe-file pe-analyzer pe-format binary-analysis portable-executable
Language:C++ 163
jovibor / Pepper
PE32 (x86) and PE32+ (x64) binaries analysis tool, resources viewer/extractor.
pe-file pe-analyzer pe-format pe-viewer files-viewer pe portable-executable pepper viewer binary-analysis
Language:C++ 161
LibObjectFile
xoofx / LibObjectFile
LibObjectFile is a .NET library to read, manipulate and write linker and executable object files (e.g ELF, PE, DWARF, ar...)
dwarf elf elf-parser dotnet debugging linker csharp pe-file
Language:C# 161
peid
packing-box / peid
Python implementation of the Packed Executable iDentifier (PEiD)
peid peid-signature pe-file pe-files pe-format signature-detection python entrypoint packing-detection executable-packing malware-packers malware-analysis malware-research binary-analysis research-tools
Language:Python 136
vic4key / QLoader
QLoader is a PE loader creator that helps you quickly create a non-exe loader for application
qloader loader patcher pe-file
Language:C++ 108
jaketae / deep-malware-detection
A neural approach to malware detection in portable executables
deep-learning malware-detection malware-research pe-file pe-format pytorch
Language:Python 79
hasherezade / ViDi
ViDi Visual Disassembler (experimental)
bearparser disassembler pe-file multiplatform
Language:C++ 76
Vutils
vic4key / Vutils
Vutils or Vic Utilities is an utility library written in Modern C++ and for Modern C++. It helps your programming go easier, faster, and simpler.
windows hacking network socket hooking registry wmi api-hooking message-hooking picker-dialog file-mapping thread-pool file-system async-socket pe-file ini-file cryptography restful-client service-manager
Language:C++ 71
hasherezade / pe2pic
Small visualizator for PE files
pe-file pe-format pefile visualization malware-analysis
Language:Python 67
andyjsmith / Exe-Spy
ExeSpy is a cross-platform PE viewer for EXE and DLL files
forensics forensics-tools windows-forensics pe-file portable-executable gui
Language:Python 62
hMihaiDavid / addscn
Add an empty section to a PE file
c executable executable-formats pe pe-file tool windows
Language:C++ 51
dotnet / metadata-tools
Contains tools for metadata, such as Roslyn's metadata visualizer.
ecma-335 metadata portable pe-file portable-pdb
Language:C# 49
bintropy
packing-box / bintropy
Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes
entropy pe-file pe-files pe-format elf elf-format elf-binaries packing-detection mach-o lief python executable-packing malware-packers malware-analysis malware-research binary-analysis research-tools
Language:Python 47
Ricky5panish / PE-Runtime-Crypter
A runtime Crypter written in C++ to bypass AVs signature based detection
bypass-antivirus x64 cpp crypter pe-file poc runtime winapi evasion redteam fileless
Language:C++ 36
packing-box / dataset-packed-pe
Dataset of packed PE samples
dataset pe-files upx samples pe-format executable-packing pe-file malware-packers malware-analysis portable-executable malware-research binary-analysis
Language:Python 33
pypackerdetect
packing-box / pypackerdetect
Packing detection tool for PE files
detector pe-file pe-format peid entrypoint pe-sections pe-files signature-detection packing-detection python executable-packing malware-packers malware-analysis malware-research binary-analysis peid-signature research-tools
Language:Python 23
JohnTroony / PE-CodeCaving
Work files for my blog post "Code Caving in a PE file.
pe-file windows pe fileformat code-injection code-cave pecoff backdoor binary-exploitation
16
levanvn / PE_Packer
Simple Packer PE File
packer pe-file
Language:C++ 15
Alex4386-vault / pe-parser
PE/MZ Header Parser :: A crossplatform Windows PE/MS-DOS MZ Header Parser : Powered by @pay1oad-repo
reverse-engineering pe-analyzer pe-file windows crossplatform cpp pe-header pe-parse software-analysis mz-header mz-parser ms-dos
Language:C++ 11
BarakAharoni / PEFA
PE File Analysis Tool
cybersecurity malware-analysis pe-file reverse-engineering security-research security-tools binary-analysis python
Language:Python 6
StackOverflowExcept1on / anonlink
Command line tool to automatically patch link.exe to remove Rich PE Header
linker patcher pe-file rust windows
Language:Rust 6
jmcph4 / butyl
Binary executable tool
binary-analysis executables executable-formats pe-file pe-format pe-analyzer elf elf-binaries malware-analysis malware-research reverse-engineering dos coff
Language:Rust 5
prabormukherjee / Antivirus
A basic malware detector using Machine Learning
joblib antivirus malware-detector pyfile pe-file hashlib ml
Language:Python 4
vic4key / Dependency-Walker
Dependency Walker - a tool that recursive listing and fixing-up dependencies of a PE file
windows pe-file dependency walker
Language:Python 4
fafalone / CheckBitness
A simple utility to verify an executable is valid and check whether 32bit/64bit
pe-file pe-format twinbasic vb6
Language:Visual Basic 6.0 3
jmcph4 / PEek
PEek is a simple PE file viewer.
c pe pe-file binary-analysis malware-analysis windows executable tool tools
Language:C 3
zakuciael / cfv
Cross-platform node.js library that can extracts file versions from a valid PE file (.exe)
cfv file-version cross-platform pe-file
Language:TypeScript 3
fafalone / SetPEImageProps
Set PE Image Header Properties
build-tool pe-file pe-format twinbasic vb6 windows
Language:Visual Basic 6.0 2