Alternatives and similar repositories for pe_tree:

Users that are interested in pe_tree are comparing it to the libraries listed below

• mandiant / speakeasy
  Windows kernel and user mode emulation.
  ☆1,576Updated this week
• gaasedelen / tenet
  A Trace Explorer for Reverse Engineers
  ☆1,362Updated last year
• gaasedelen / lighthouse
  A Coverage Explorer for Reverse Engineers
  ☆2,319Updated 7 months ago
• hasherezade / pe-sieve
  Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-mem…
  ☆3,225Updated last week
• hasherezade / pe-bear-releases
  PE-bear (builds only)
  ☆773Updated last year
• malrev / ABD
  Course materials for Advanced Binary Deobfuscation by NTT Secure Platform Laboratories
  ☆1,108Updated 4 years ago
• thalium / icebox
  Virtual Machine Introspection, Tracing & Debugging
  ☆571Updated 2 years ago
• mandiant / flare-ida
  IDA Pro utilities from FLARE team
  ☆2,276Updated 3 months ago
• rabbitstack / fibratus
  Adversary tradecraft detection, protection, and hunting
  ☆2,271Updated this week
• hugsy / defcon_27_windbg_workshop
  DEFCON 27 workshop - Modern Debugging with WinDbg Preview
  ☆715Updated 3 months ago
• horsicq / XPEViewer
  PE file viewer/editor for Windows, Linux and MacOS.
  ☆1,034Updated this week
• hasherezade / hollows_hunter
  Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks,…
  ☆2,106Updated this week
• joxeankoret / diaphora
  Diaphora, the most advanced Free and Open Source program diffing tool.
  ☆3,740Updated 2 months ago
• hasherezade / tiny_tracer
  A Pin Tool for tracing API calls etc
  ☆1,380Updated 2 weeks ago
• fr0gger / awesome-ida-x64-olly-plugin
  A curated list of IDA x64DBG, Ghidra and OllyDBG plugins.
  ☆1,340Updated 8 months ago
• mohuihui / antispy
  AntiSpy is a free but powerful anti virus and rootkits toolkit.It offers you the ability with the highest privileges that can detect,anal…
  ☆1,097Updated 3 years ago
• taviso / ctftool
  Interactive CTF Exploration Tool
  ☆1,651Updated 3 years ago
• mandiant / flare-floss
  FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
  ☆3,412Updated this week
• unipacker / unipacker
  Automatic and platform-independent unpacker for Windows binaries based on emulation
  ☆679Updated 4 months ago
• everdox / InfinityHook
  Hook system calls, context switches, page faults and more.
  ☆2,491Updated last year
• erocarrera / pefile
  pefile is a Python module to read and work with PE (Portable Executable) files
  ☆1,910Updated 5 months ago
• corkami / pocs
  Proof of Concepts (PE, PDF...)
  ☆1,494Updated last month
• silverf0x / RpcView
  RpcView is a free tool to explore and decompile Microsoft RPC interfaces
  ☆953Updated last year
• qilingframework / qiling
  A True Instrumentable Binary Emulation Framework
  ☆5,253Updated this week
• AllsafeCyberSecurity / awesome-ghidra
  A curated list of awesome Ghidra materials
  ☆1,219Updated 3 years ago
• xairy / vmware-exploitation
  A collection of links related to VMware escape exploits
  ☆1,396Updated 5 months ago
• mandiant / flare-fakenet-ng
  FakeNet-NG - Next Generation Dynamic Network Analysis Tool
  ☆1,854Updated last month
• bootleg / ret-sync
  ret-sync is a set of plugins that helps to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg2/x64dbg) with IDA/Ghidra/Binary Ninja…
  ☆2,093Updated 11 months ago
• onethawt / idaplugins-list
  A list of IDA Plugins
  ☆3,629Updated 8 months ago
• hasherezade / malware_training_vol1
  Materials for Windows Malware Analysis training (volume 1)
  ☆1,964Updated 7 months ago