blackberry / pe_treeLinks
Python module for viewing Portable Executable (PE) files in a tree-view using pefile and PyQt5. Can also be used with IDA Pro and Rekall to dump in-memory PE files and reconstruct imports.
☆1,338Updated 3 years ago
Alternatives and similar repositories for pe_tree
Users that are interested in pe_tree are comparing it to the libraries listed below
Sorting:
- Windows kernel and user mode emulation.☆1,825Updated 3 weeks ago
- Course materials for Advanced Binary Deobfuscation by NTT Secure Platform Laboratories☆1,160Updated 5 years ago
- PE-bear (builds only)☆782Updated 2 years ago
- pefile is a Python module to read and work with PE (Portable Executable) files☆2,010Updated last year
- PE file viewer/editor for Windows, Linux and MacOS.☆1,184Updated this week
- Retired beginner/intermediate malware analysis training materials from @pedramamini and @erocarrera.☆902Updated 5 years ago
- A Pin Tool for tracing API calls etc☆1,609Updated 2 months ago
- Automatic and platform-independent unpacker for Windows binaries based on emulation☆738Updated 5 months ago
- AntiSpy is a free but powerful anti virus and rootkits toolkit.It offers you the ability with the highest privileges that can detect,anal…☆1,115Updated 4 years ago
- Adversary tradecraft detection, protection, and hunting☆2,424Updated this week
- DRAKVUF Sandbox - automated hypervisor-level malware analysis system☆1,261Updated 2 weeks ago
- A static analyzer for PE executables.☆1,100Updated 2 years ago
- A Trace Explorer for Reverse Engineers☆1,508Updated 2 years ago
- DEFCON 27 workshop - Modern Debugging with WinDbg Preview☆743Updated last year
- Export disassemblies into Protocol Buffers☆1,173Updated last week
- IDA Pro utilities from FLARE team☆2,432Updated last year
- Windows System Call Tables (NT/2000/XP/2003/Vista/7/8/10/11)☆2,499Updated 3 weeks ago
- Interactive CTF Exploration Tool☆1,664Updated 4 years ago
- Linker/Compiler/Tool detector for Windows, Linux and MacOS.☆571Updated this week
- Virtual Machine Introspection, Tracing & Debugging☆595Updated 3 years ago
- FakeNet-NG - Next Generation Dynamic Network Analysis Tool☆2,063Updated last month
- Set of tools to analyze Windows sandboxes for exposed attack surface.☆2,257Updated 2 months ago
- A curated list of IDA x64DBG, Ghidra and OllyDBG plugins.☆1,501Updated 3 months ago
- Materials for Windows Malware Analysis training (volume 1)☆2,021Updated last year
- Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-mem…☆3,538Updated 2 months ago
- RpcView is a free tool to explore and decompile Microsoft RPC interfaces☆1,037Updated 2 years ago
- A Coverage Explorer for Reverse Engineers☆2,487Updated last year
- DRAKVUF Black-box Binary Analysis☆1,198Updated 2 months ago
- Portable Executable parsing library (from PE-bear)☆659Updated 3 months ago
- PE Tools - Portable executable (PE) manipulation toolkit☆1,159Updated 3 months ago