Alternatives and similar repositories for pe_tree

Users that are interested in pe_tree are comparing it to the libraries listed below

• mandiant / speakeasy
  Windows kernel and user mode emulation.
  ☆1,671Updated 2 months ago
• qilingframework / qiling
  A True Instrumentable Binary Emulation Framework
  ☆5,493Updated last month
• hasherezade / pe-sieve
  Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-mem…
  ☆3,351Updated 3 weeks ago
• gaasedelen / lighthouse
  A Coverage Explorer for Reverse Engineers
  ☆2,370Updated 11 months ago
• malrev / ABD
  Course materials for Advanced Binary Deobfuscation by NTT Secure Platform Laboratories
  ☆1,116Updated 4 years ago
• bootleg / ret-sync
  ret-sync is a set of plugins that helps to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg2/x64dbg) with IDA/Ghidra/Binary Ninja…
  ☆2,162Updated last year
• mandiant / flare-ida
  IDA Pro utilities from FLARE team
  ☆2,355Updated 7 months ago
• unipacker / unipacker
  Automatic and platform-independent unpacker for Windows binaries based on emulation
  ☆703Updated 8 months ago
• taviso / ctftool
  Interactive CTF Exploration Tool
  ☆1,657Updated 3 years ago
• thalium / icebox
  Virtual Machine Introspection, Tracing & Debugging
  ☆579Updated 3 years ago
• rabbitstack / fibratus
  Adversary tradecraft detection, protection, and hunting
  ☆2,348Updated this week
• ghidraninja / ghidra_scripts
  Scripts for the Ghidra software reverse engineering suite.
  ☆1,084Updated 4 years ago
• hasherezade / tiny_tracer
  A Pin Tool for tracing API calls etc
  ☆1,477Updated last week
• trailofbits / winchecksec
  Checksec, but for Windows: static detection of security mitigations in executables
  ☆591Updated 5 months ago
• airbus-seclab / bincat
  Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free…
  ☆1,809Updated 3 months ago
• everdox / InfinityHook
  Hook system calls, context switches, page faults and more.
  ☆2,551Updated 2 years ago
• hasherezade / hollows_hunter
  Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks,…
  ☆2,178Updated 3 weeks ago
• j00ru / windows-syscalls
  Windows System Call Tables (NT/2000/XP/2003/Vista/7/8/10/11)
  ☆2,359Updated last month
• mandiant / flare-fakenet-ng
  FakeNet-NG - Next Generation Dynamic Network Analysis Tool
  ☆1,939Updated 2 months ago
• AllsafeCyberSecurity / awesome-ghidra
  A curated list of awesome Ghidra materials
  ☆1,266Updated 3 years ago
• mandiant / flare-floss
  FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
  ☆3,562Updated last week
• OpenRCE / Malware-Analysis-Training
  Retired beginner/intermediate malware analysis training materials from @pedramamini and @erocarrera.
  ☆898Updated 5 years ago
• cea-sec / miasm
  Reverse engineering framework in Python
  ☆3,689Updated 4 months ago
• hasherezade / pe-bear-releases
  PE-bear (builds only)
  ☆779Updated 2 years ago
• gaasedelen / tenet
  A Trace Explorer for Reverse Engineers
  ☆1,422Updated last year
• joxeankoret / diaphora
  Diaphora, the most advanced Free and Open Source program diffing tool.
  ☆3,906Updated 7 months ago
• horsicq / Nauz-File-Detector
  Linker/Compiler/Tool detector for Windows, Linux and MacOS.
  ☆555Updated this week
• xairy / vmware-exploitation
  A collection of links related to VMware escape exploits
  ☆1,437Updated 9 months ago
• Maktm / FLIRTDB
  A community driven collection of IDA FLIRT signature files
  ☆1,267Updated 3 years ago
• hugsy / defcon_27_windbg_workshop
  DEFCON 27 workshop - Modern Debugging with WinDbg Preview
  ☆726Updated 7 months ago