hasherezade/pe-bear

Portable Executable reversing tool with a friendly GUI

Language: C++ - Size: 1.14 MB - Last synced at: about 6 hours ago - Pushed at: about 7 hours ago - Stars: 3,022 - Forks: 184

sevaa/dwex

DWARF Explorer - a GUI utility for navigating the DWARF debug information

Language: Python - Size: 504 KB - Last synced at: 1 day ago - Pushed at: 1 day ago - Stars: 244 - Forks: 21

0xl0/PewParser

multi-platform C++ library and console tool for parsing Portable Executable (PE) files (.exe, .dll)

Language: C++ - Size: 1.54 MB - Last synced at: 4 days ago - Pushed at: 4 days ago - Stars: 0 - Forks: 0

nurupo/mingw-ldd

Lists dependencies of a PE (exe/dll) file

Language: Python - Size: 50.8 KB - Last synced at: 6 days ago - Pushed at: about 1 year ago - Stars: 22 - Forks: 2

hasherezade/pe-sieve

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

Language: C++ - Size: 131 MB - Last synced at: 7 days ago - Pushed at: 7 days ago - Stars: 3,275 - Forks: 449

adamhlt/PE-Explorer

PE Explorer in C++ (x86 / x64) - PE file parser, retrieve exports and imports

Language: C++ - Size: 13.3 MB - Last synced at: about 2 hours ago - Pushed at: about 1 year ago - Stars: 65 - Forks: 19

HoShiMin/formatPE

A bunch of parsers for PE and PDB formats in C++

Language: C++ - Size: 81.1 KB - Last synced at: 19 days ago - Pushed at: 12 months ago - Stars: 237 - Forks: 49

jovibor/Pepper

PE32 (x86) and PE32+ (x64) binaries analysis tool, resources viewer/extractor.

Language: C++ - Size: 2.2 MB - Last synced at: 24 days ago - Pushed at: 24 days ago - Stars: 161 - Forks: 36

hasherezade/pe-bear-releases

PE-bear (builds only)

Size: 146 KB - Last synced at: 22 days ago - Pushed at: almost 2 years ago - Stars: 775 - Forks: 73

Alex4386-vault/pe-parser 📦

PE/MZ Header Parser :: A crossplatform Windows PE/MS-DOS MZ Header Parser : Powered by @pay1oad-repo

Language: C++ - Size: 846 KB - Last synced at: 1 day ago - Pushed at: 9 months ago - Stars: 11 - Forks: 1

mauricelambert/ProgramExecutableAnalyzer

This script analyzes MZ-PE (MS-DOS) executable file

Language: Python - Size: 181 KB - Last synced at: 15 days ago - Pushed at: 3 months ago - Stars: 4 - Forks: 0

svtv/PEDependencyAnalyzer_PeNet

A command-line tool for analyzing and publishing dependencies of Windows PE files (executables and DLLs)

Language: C# - Size: 25.4 KB - Last synced at: 26 days ago - Pushed at: 3 months ago - Stars: 0 - Forks: 0

r3yl4h/pe-x86-parser

this is a small pe64 file analyzer in c++ with winapi, I didn't do it in the best way but hey, it's a small project like that that I thought was nice to do, the program can work in it calling with arguments or executing it as such.

Language: C++ - Size: 3.27 MB - Last synced at: 4 months ago - Pushed at: 4 months ago - Stars: 13 - Forks: 1

jovibor/libpe

Library for parsing internal structures of PE32/PE32+ binary files.

Language: C++ - Size: 397 KB - Last synced at: 5 months ago - Pushed at: 5 months ago - Stars: 160 - Forks: 36

jnastarot/furikuri 📦

too busy for that all, furikuri is framework for code protection

Language: C++ - Size: 882 KB - Last synced at: 5 months ago - Pushed at: over 5 years ago - Stars: 157 - Forks: 41

BGPavelAng/MasamunPE

MasamunPE Windows

Size: 378 KB - Last synced at: 6 months ago - Pushed at: 6 months ago - Stars: 4 - Forks: 0

BGPavelAng/MasamunpeX

MasamunpeX Linux

Language: C - Size: 1.16 MB - Last synced at: 6 months ago - Pushed at: 6 months ago - Stars: 5 - Forks: 0

password123456/CertVerify

A scanner that files with compromised or untrusted code signing certificates written in python.

Language: Python - Size: 158 KB - Last synced at: 10 days ago - Pushed at: over 1 year ago - Stars: 65 - Forks: 12

ignacioj/WhacAMole

Live memory analysis detecting malware IOCs in processes, modules, handles, tokens, threads, .NET assemblies, memory address space and environment variables. Dumps, detects and dissasemble hooks, shellcode, memory regions, modules and processes.

Language: C++ - Size: 6.82 MB - Last synced at: 8 months ago - Pushed at: 8 months ago - Stars: 26 - Forks: 4

CloneLTaps/ProcessExplorer

Process Explorer is a tool that lets you inspect PE internals. It also has a built in hex editor that allows you to modify any file before saving it again.

Language: C# - Size: 1.78 MB - Last synced at: 8 months ago - Pushed at: 8 months ago - Stars: 4 - Forks: 0

Washi1337/AsmResolver

A library for creating, reading and editing PE files and .NET modules.

Language: C# - Size: 8.65 MB - Last synced at: 11 months ago - Pushed at: 11 months ago - Stars: 804 - Forks: 124

UserExistsError/resource-explorer

View and extract Portable Executable (PE) resources

Language: C# - Size: 52.7 KB - Last synced at: about 1 month ago - Pushed at: about 5 years ago - Stars: 2 - Forks: 1

jnastarot/shibari

Library for linking multiple PE\PE + files to one

Language: C++ - Size: 1.19 MB - Last synced at: about 1 year ago - Pushed at: about 1 year ago - Stars: 45 - Forks: 25

jmcph4/butyl

Binary executable tool

Language: Rust - Size: 9.77 KB - Last synced at: 19 days ago - Pushed at: over 5 years ago - Stars: 5 - Forks: 1

RIscRIpt/pecoff 📦

Go package for accessing PE/COFF files.

Language: Go - Size: 1.35 MB - Last synced at: 9 months ago - Pushed at: over 4 years ago - Stars: 4 - Forks: 2

haja-fgabriel/pe_parser

Portable Executable parser for Windows. Supports both 32-bit and 64-bit executables and dynamic-link libraries

Language: C - Size: 18.6 KB - Last synced at: over 1 year ago - Pushed at: about 6 years ago - Stars: 1 - Forks: 0

deadbits/pe-static

Static file analysis for PE files

Language: Python - Size: 1.37 MB - Last synced at: 26 days ago - Pushed at: over 4 years ago - Stars: 13 - Forks: 7

marufmurtuza/PESA

A static PE Analyzer

Size: 19.6 MB - Last synced at: almost 2 years ago - Pushed at: almost 2 years ago - Stars: 0 - Forks: 0

jnastarot/enma_pe

Cross-platform library for parsing and building PE\PE+ formats

Language: C++ - Size: 769 KB - Last synced at: about 2 years ago - Pushed at: over 2 years ago - Stars: 63 - Forks: 23

rishank-shah/Static-Malware-Analysis

Python program to automate simple tasks related to static malware analysis.

Language: Python - Size: 65.4 KB - Last synced at: about 2 years ago - Pushed at: over 2 years ago - Stars: 0 - Forks: 0

ramirak/Aurora-AI

Artificial intelligence malware identifier based on thousands of malware samples

Language: Python - Size: 6.03 MB - Last synced at: about 2 years ago - Pushed at: about 2 years ago - Stars: 0 - Forks: 2

DispatchCode/PE-Analyzer

Language: Assembly - Size: 7.81 KB - Last synced at: 2 months ago - Pushed at: almost 9 years ago - Stars: 1 - Forks: 0

hal0taso/PEanalyzer

PE header analyzer

Language: Python - Size: 110 KB - Last synced at: about 2 years ago - Pushed at: almost 7 years ago - Stars: 0 - Forks: 0