
cortex
A Windows runtime analysis toolkit combining memory scanning, debugging, automation, and AI-friendly APIs.

A Windows runtime analysis toolkit combining memory scanning, debugging, automation, and AI-friendly APIs.

Object Pascal (Delphi) library for parsing, mapping, loading, and dumping Windows PE files, with relocations, imports, TLS, and remote process memory…

Pure-Go Java Decompiler and Serialization Operator

pefile is a Python module to read and work with PE (Portable Executable) files

Disable PatchGuard and Driver Signature Enforcement at boot time

Python module for viewing Portable Executable (PE) files in a tree-view using pefile and PyQt5. Can also be used with IDA Pro and Rekall to dump…

Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness

Portable Executable reversing tool with a friendly GUI

Patching ROP-encoded shellcodes into PEs

Tool that can be used to trim useless things from a PE file such as the things a file pumper would add.

Proof-of-concept exploit for CVE-2013-3900, a WinVerifyTrust signature validation vulnerability enabling arbitrary code execution via crafted…

Minimal Intel VT-x hypervisor for Windows and UEFI that virtualizes a live host for introspection, supporting dynamic hyperjacking, unhyperjacking,…

Graphical interface for PortEx, a Portable Executable and Malware Analysis Library

A library for creating, reading and editing PE files and .NET modules.

Advanced Portable Executable File Analyzer And Disassembler 32 & 64 Bit

An utility to download PDB files associated with a Portable Executable (PE).

PETriage: A symbol-unified PE file reader for triage, built for multi-platform and multi-interface use.

An open source script to perform malware static analysis on Portable Executable