pe-format

There are 5 repositories under pe-format topic.

hasherezade / pe-sieve
Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
pe-format hooking pe-dumper pe-analyzer libpeconv process-analyzer scans anti-malware pe-sieve malware-analysis memory-forensics
Language:C++ 2903
hasherezade / pe-bear
Portable Executable reversing tool with a friendly GUI
pe-file pe-format pe-analyzer pe-analyzer-gui pe-editor multiplatform malware-analysis bearparser
Language:C++ 2442
hasherezade / libpeconv
A library to load, manipulate, dump PE files. See also: https://github.com/hasherezade/libpeconv_tpl
pe-file pe-format libpeconv pe-loader manual-mapping
Language:C++ 1053
guided-hacking / GuidedHacking-Injector
The BEST DLL Injector Library.
dll-injection manual-mapping shellcode-injection pe-loader pe-format dll-inject dll-injector dllinjector game-hacking injection injector injector-x64
Language:C++ 894
XPEViewer
horsicq / XPEViewer
PE file viewer/editor for Windows, Linux and MacOS.
portable-executable pe-format reverse-engineering windows-system disassembler pe hacktoberfest hacktoberfest2023
Language:C++ 885
trailofbits / pe-parse
Principled, lightweight C/C++ PE parser
pe-format portable-executable hacktoberfest
Language:C++ 765
hasherezade / pe-bear-releases
PE-bear (builds only)
pe-analyzer pe-format pe-editor
763
MrSmith33 / vox
Vox language compiler. AOT / JIT / Linker. Zero dependencies
jit x86-64 codegen pe-format linker d dlang compiler amd64 ssa-form aot vox voxlang language programming-language
Language:D 325
saferwall / pe
A :zap: lightweight Go package to parse, analyze and extract metadata from Portable Executable (PE) binaries. Designed for malware analysis tasks and robust against PE malformations.
pe-file portable-executable malware pe coff pe-malformations malware-analysis parsing go golang parser binary-analysis reverse-engineering pe-format
Language:Go 290
hasherezade / IAT_patcher
Persistent IAT hooking application - based on bearparser
pe iat hooking multiplatform iat-hooking pe-file pe-format bearparser
Language:C++ 242
HoShiMin / formatPE
A bunch of parsers for PE and PDB formats in C++
cpp header-only modern-cpp pdb pdb-files pdb-parser pdb-structure pe pe-analyzer pe-applications pe-file pe-format portable-executable pe-parser
Language:C++ 212
tgrysztar / fasmg
flat assembler g - adaptable assembly engine
fasmg assembly x86 x86-64 macro instructions opcodes assembler executable-formats binary-format hex-format pe-format elf-format mach-o avx-instructions wasm
Language:Assembly 195
jovibor / libpe
Library for parsing internal structures of PE32/PE32+ binary files.
binary-analysis pe-analyzer pe-file pe-format portable-executable
Language:C++ 148
jovibor / Pepper
PE32 (x86) and PE32+ (x64) binaries analysis tool, resources viewer/extractor.
pe-file pe-analyzer pe-format pe-viewer files-viewer pe portable-executable pepper viewer binary-analysis
Language:C++ 130
Fleynaro / SDA
SDA is a rich cross-platform tool for reverse engineering that focused firstly on analysis of computer games. I'm trying to create a mix of the Ghidra, Cheat Engine and x64dbg. My tool will combine static and dynamic analysis of programs. Now SDA is being developed.
reverse-engineering tool games analysis debugger decompiler x86-64 disassembler pe-format x86 static-analysis dynamic-analysis
Language:C++ 128
peid
packing-box / peid
Python implementation of the Packed Executable iDentifier (PEiD)
peid peid-signature pe-file pe-files pe-format signature-detection python entrypoint packing-detection executable-packing malware-packers malware-analysis malware-research binary-analysis research-tools
Language:Python 120
jnastarot / enma_pe
Cross-platform library for parsing and building PE\PE+ formats
portable-executable executable-formats pe-format pe-analyzer binary-analysis malware-analysis malware-research pe32-plus parsing-library reverse-engineering enma-pe
Language:C++ 74
hasherezade / pe2pic
Small visualizator for PE files
pe-file pe-format pefile visualization malware-analysis
Language:Python 66
jaketae / deep-malware-detection
A neural approach to malware detection in portable executables
deep-learning pytorch malware-detection malware-research pe-file pe-format
Language:Python 66
packing-box / docker-packing-box
Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection
docker-image executable-packing malware-packers research-platform pe-format elf-format machine-learning dataset-generation packing-detection malware-analysis malware-research binary-analysis research-tools
Language:Python 42
bintropy
packing-box / bintropy
Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes
entropy pe-file pe-files pe-format elf elf-format elf-binaries packing-detection mach-o lief python executable-packing malware-packers malware-analysis malware-research binary-analysis research-tools
Language:Python 38
hMihaiDavid / hooks
A DLL that performs IAT hooking
pe-format iat-hooking reverse-engineering dlls hooks
Language:C++ 25
0xcpu / RElieve
RE scripts, snippets (IDA, lief, gdb, etc.)
reverse-engineering elf-parser elf lief pe-format pe-loader
Language:Python 23
packing-box / dataset-packed-pe
Dataset of packed PE samples
dataset pe-files upx samples pe-format executable-packing pe-file malware-packers malware-analysis portable-executable malware-research binary-analysis
Language:Python 23
pypackerdetect
packing-box / pypackerdetect
Packing detection tool for PE files
detector pe-file pe-format peid entrypoint pe-sections pe-files signature-detection packing-detection python executable-packing malware-packers malware-analysis malware-research binary-analysis peid-signature research-tools
Language:Python 19
IsaacMarovitz / pe-parser
PE Parsing, but blazing fast
binary-analysis cross-platform parser pe pe-format pe-parser rust
Language:Rust 18
jet2jet / pe-library-js
Provides parsing and generating Portable Executable binaries
portable-executable pe pe-format javascript javascript-library nodejs
Language:TypeScript 12
Flawww / Relocation-Reconstructor
Heuristically recover relocations and imports from module memory dumps
iat import memory-dump pe pe-format pe-header rebuild relocations relocs portable-executable re windows reverse-engineering
Language:C++ 9
Alon-Regev / VeganVirus
A Virus to encourage veganism and deter against eating meat.
api-hook assembly c code-injection cpp cybersecurity dll-injection gdi-plus hackathon oop operating-system pe-format project teamwork visual-studio winapi windows
Language:C++ 7
phax / gt
GetTyp/GetType/GT2 - legacy file format detector
file pe exe commandline c-plus-plus portable-executable file-format pe-format file-format-detection
Language:C++ 6
jmcph4 / butyl
Binary executable tool
binary-analysis executables executable-formats pe-file pe-format pe-analyzer elf elf-binaries malware-analysis malware-research reverse-engineering dos coff
Language:Rust 5
katahiromz / CodeReverse2
The reverse-engineering tool for Windows executables
reverse-engineering disassembler disassembly x86 x86-64 windows pe-format executable cxx cxx11
Language:C++ 5
AymenSekhri / MalNet
Machine Learning Malware Detector
malware-detector machine-learning keras-tensorflow pe-format
Language:Python 4
fafalone / CheckBitness
A simple utility to verify an executable is valid and check whether 32bit/64bit
pe-file pe-format twinbasic vb6
Language:Visual Basic 6.0 3
AnkitaSinha98 / Malware-Prediction
A Malware Prediction model that predicted if the PE format file is malicious or legitimate.
malware-prediction pe-format
Language:Python 2
fafalone / SetPEImageProps
Set PE Image Header Properties
build-tool pe-file pe-format twinbasic vb6 windows
Language:Visual Basic 6.0 1