pe-format

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

A library to load, manipulate, dump PE files. See also: https://github.com/hasherezade/libpeconv_tpl

PE-bear (builds only)

Principled, lightweight C/C++ PE parser

PE file viewer/editor for Windows, Linux and MacOS.

A feature rich DLL injection library.

Vox language compiler. AOT / JIT / Linker. Zero dependencies

Persistent IAT hooking application - based on bearparser

flat assembler g - adaptable assembly engine

PE (x86) and PE+ (x64) files viewer, based on libpe.

Library for tinkering with PE/PE+ binaries.

A bunch of parsers for PE and PDB formats in C++

Cross-platform library for parsing and building PE\PE+ formats

SDA is a rich cross-platform tool for reverse engineering that focused firstly on analysis of computer games. I'm trying to create a mix of the Ghidra, Cheat Engine and x64dbg. My tool will combine static and dynamic analysis of programs. Now SDA is being developed.

A DLL that performs IAT hooking

RE scripts, snippets (IDA, lief, gdb, etc.)

Python implementation of the Packed Executable iDentifier (PEiD)

Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection

Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes

Packing detection tool for PE files

The reverse-engineering tool for Windows executables

GetTyp/GetType/GT2 - legacy file format detector

Dataset of packed PE samples

Machine Learning Malware Detector

Provides parsing and generating Portable Executable binaries

Binary executable tool

A Malware Prediction model that predicted if the PE format file is malicious or legitimate.

Simple PE Format Parser written in C/C++ using Win32API

Inject a New Section to the pe-executable file

x86-64 executable creation example