Library to read and edit files in the following formats: Executable and Linking Format (ELF), Portable Executable (PE), MachO and OAT (Android Runtime)

✭ 105

python elf pe mach-o

Pe recovery tools

Helper tools for recovering dumped PE files

✭ 104

Floodgate

Hybrid mode plugin to allow for connections from Geyser to join online mode servers.

✭ 101

java plugin minecraft bukkit pe

Artifacts Kit

Pseudo-malicious usermode memory artifact generator kit designed to easily mimic the footprints left by real malware on an infected Windows OS.

✭ 99

shellcode generator malware forensics dll kit header pe

App Peid

PEiD detects most common packers, cryptors and compilers for PE files.

✭ 72

html reverse-engineering disassembly pe

Sigthief

Stealing Signatures and Making One Invalid Signature at a Time

✭ 830

python python3 certificates pe

Win Version Info

Windows-only native addon to read version info from executables.

✭ 5

nodejs windows metadata pe

Manalyze

A static analyzer for PE executables.

✭ 701

analysis malware yara static pe

Amber

Reflective PE packer.

✭ 594

go assembly shellcode packer payload stub pe

Goblin

An impish, cross-platform binary parsing crate, written in Rust

✭ 591

rust cross-platform reverse-engineering archive binary-analysis elf pe

Rop Tool

A tool to help you write binary exploits

✭ 590

c arm exploit x86 x86-64 elf mips pe rop

Dissection

The dissection of a simple "hello world" ELF binary.

✭ 427

assembly binary-analysis elf disassembly pe

Bearparser

Portable Executable parsing library (from PE-bear)

✭ 415

multiplatform pe parser-library

Penet

Portable Executable (PE) library written in .Net

✭ 288

windows malware-analysis pe

Pepper

PE (x86) and PE+ (x64) files viewer, based on libpe.

✭ 65

C++c viewer binary-analysis pepper pe pe-format portable-executable pe-file pe-analyzer pe-viewer files-viewer

MiniNT5-Tools

small Windows 10 (based on Windows PE) with customised tools

✭ 34

C#c Batchfile C++windows usb lan boot windows10 pe pxe windows-pe minint minint5

Automated-Malware-Analysis-List

My personal Automated Malware Analysis Sandboxes and Services

✭ 20

analysis sandbox malware elf pe

HatVenom

HatVenom is a HatSploit native powerful payload generation tool that provides support for all common platforms and architectures.

✭ 84

python c exploit binary malware executable exploits elf binary-exploitation macho pe payload payloads exe architectures shellcodes shellcode-injection entysec

mem64

Run Any Native PE file as a memory ONLY Payload , most likely as a shellcode using hta attack vector which interacts with Powershell.

✭ 26

python native executable pe memory-payload

pe-loader

A Windows PE format file loader

✭ 81

C++c windows loader executable internals pe

pelauncher

Portable Executable launcher for Windows NT bypassing loader

✭ 49

C++c windows winapi win32 pe portable-executable reactos windows-nt winldr peloader wcecl

machomachomangler

Tools for mangling Mach-O and PE binaries

✭ 39

python c shell mach-o pe shared-libraries

linux-pe

COFF and Portable Executable format described using standard C++ with no dependencies.

✭ 163

C++CMake windows pe portable-executable coff

moneta

Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs

✭ 384

C++c C#windows ioc memory scanner malware injection process dump moneta pe artifact reflective usermode hollowing

kar98k public

pwn & ctf tools for windows

✭ 24

python windows x64 reverse-engineering x86 pwn ctf inject malware-analysis binary-analysis pe memory-analysis ctf-tools ce pwn-tools

checksec.rs

Fast multi-platform (ELF/PE/MachO) binary checksec written in Rust.

✭ 71

rust windows linux security osx elf macho pe checksec binary-security

FactionsPE

Most advanced factions plugin for PocketMine-MP

✭ 46

PHP plugin minecraft pocketmine mcpe pe faction mcpe-plugin massivecraft

1-37 of 37 pe projects