
LIEF
Cross-platform library to parse, modify, and abstract ELF, PE, and MachO executable formats. Supports C++, Python, and Rust APIs with disassembler,…

Cross-platform library to parse, modify, and abstract ELF, PE, and MachO executable formats. Supports C++, Python, and Rust APIs with disassembler,…

A python library to parse OneNote (.one) files

machofile is a module to parse Mach-O binary files

A radare2 script to parse the gopclntab to facilitate Reverse Engineering Go binaries.

Asclepius validates backup integrity by restoring files and actively testing their recoverability. Instead of trusting metadata, it attempts to parse…

pefile is a Python module to read and work with PE (Portable Executable) files

Parse and analyze a Windows Amcache.hve registry hive, VirusTotal integration.

Different methods to get current username without using whoami

A python script that can detect and parse loki-bot (malware) related network traffic. This script can be helpful to DFIR analysts and security…