
SimpleVisor
Minimal Intel VT-x hypervisor for Windows and UEFI that virtualizes a live host for introspection, supporting dynamic hyperjacking, unhyperjacking,…

Minimal Intel VT-x hypervisor for Windows and UEFI that virtualizes a live host for introspection, supporting dynamic hyperjacking, unhyperjacking,…

Object Pascal (Delphi) library for parsing, mapping, loading, and dumping Windows PE files, with relocations, imports, TLS, and remote process memory…

A Windows runtime analysis toolkit combining memory scanning, debugging, automation, and AI-friendly APIs.

Pure-Go Java Decompiler and Serialization Operator

A library for creating, reading and editing PE files and .NET modules.

An utility to download PDB files associated with a Portable Executable (PE).

Live, system-wide USB transfer sniffer in eBPF — decodes USB traffic inline (control SETUP, SCSI, HID) from two universal URB hooks. No usbmon, no…

A curated list of awesome Hacking tutorials, tools and resources

Portable Executable reversing tool with a friendly GUI

Chase H.Q. for ZX Spectrum — reverse-engineered and reconstructed in portable C

PETriage: A symbol-unified PE file reader for triage, built for multi-platform and multi-interface use.

pefile is a Python module to read and work with PE (Portable Executable) files

Patching ROP-encoded shellcodes into PEs

PEframe is a open source tool to perform static analysis on Portable Executable malware and malicious MS Office documents.

Advanced Portable Executable File Analyzer And Disassembler 32 & 64 Bit

Disable PatchGuard and Driver Signature Enforcement at boot time

Graphical interface for PortEx, a Portable Executable and Malware Analysis Library

Tool that can be used to trim useless things from a PE file such as the things a file pumper would add.