Tools

erocarrera/pefile

pefile is a Python module to read and work with PE (Portable Executable) files

lief-project/lief

Cross-platform library to parse, modify, and abstract ELF, PE, and MachO executable formats. Supports C++, Python, and Rust APIs with disassembler,…

asherdll/r2gopclntabparser

A radare2 script to parse the gopclntab to facilitate Reverse Engineering Go binaries.

pstirparo/machofile

machofile is a module to parse Mach-O binary files

dissectmalware/pyonenote

A python library to parse OneNote (.one) files