Alternatives and similar repositories for pe_tree

Users that are interested in pe_tree are comparing it to the libraries listed below

• mandiant / speakeasy
  Windows kernel and user mode emulation.
  ☆1,658Updated last month
• hasherezade / tiny_tracer
  A Pin Tool for tracing API calls etc
  ☆1,439Updated last month
• thalium / icebox
  Virtual Machine Introspection, Tracing & Debugging
  ☆578Updated 3 years ago
• taviso / ctftool
  Interactive CTF Exploration Tool
  ☆1,655Updated 3 years ago
• horsicq / Nauz-File-Detector
  Linker/Compiler/Tool detector for Windows, Linux and MacOS.
  ☆557Updated this week
• everdox / InfinityHook
  Hook system calls, context switches, page faults and more.
  ☆2,544Updated 2 years ago
• AllsafeCyberSecurity / awesome-ghidra
  A curated list of awesome Ghidra materials
  ☆1,263Updated 3 years ago
• hasherezade / pe-sieve
  Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-mem…
  ☆3,323Updated this week
• horsicq / XPEViewer
  PE file viewer/editor for Windows, Linux and MacOS.
  ☆1,084Updated this week
• qilingframework / qiling
  A True Instrumentable Binary Emulation Framework
  ☆5,444Updated 3 weeks ago
• unipacker / unipacker
  Automatic and platform-independent unpacker for Windows binaries based on emulation
  ☆697Updated 8 months ago
• malrev / ABD
  Course materials for Advanced Binary Deobfuscation by NTT Secure Platform Laboratories
  ☆1,112Updated 4 years ago
• gaasedelen / lighthouse
  A Coverage Explorer for Reverse Engineers
  ☆2,364Updated 10 months ago
• mandiant / flare-ida
  IDA Pro utilities from FLARE team
  ☆2,333Updated 7 months ago
• mohuihui / antispy
  AntiSpy is a free but powerful anti virus and rootkits toolkit.It offers you the ability with the highest privileges that can detect,anal…
  ☆1,096Updated 4 years ago
• hasherezade / pe-bear-releases
  PE-bear (builds only)
  ☆779Updated last year
• ExpLife0011 / awesome-windows-kernel-security-development
  windows kernel security development
  ☆2,006Updated 2 years ago
• google / binexport
  Export disassemblies into Protocol Buffers
  ☆1,107Updated last month
• hasherezade / hollows_hunter
  Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks,…
  ☆2,162Updated this week
• airbus-seclab / bincat
  Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free…
  ☆1,800Updated 3 months ago
• fr0gger / awesome-ida-x64-olly-plugin
  A curated list of IDA x64DBG, Ghidra and OllyDBG plugins.
  ☆1,389Updated last year
• rabbitstack / fibratus
  Adversary tradecraft detection, protection, and hunting
  ☆2,342Updated this week
• saferwall / saferwall
  Collaborative Malware Analysis Platform at Scale
  ☆742Updated last month
• gaasedelen / tenet
  A Trace Explorer for Reverse Engineers
  ☆1,408Updated last year
• mandiant / flare-fakenet-ng
  FakeNet-NG - Next Generation Dynamic Network Analysis Tool
  ☆1,925Updated last month
• glmcdona / Process-Dump
  Windows tool for dumping malware PE files from memory back to disk for analysis.
  ☆1,740Updated 8 months ago
• bootleg / ret-sync
  ret-sync is a set of plugins that helps to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg2/x64dbg) with IDA/Ghidra/Binary Ninja…
  ☆2,143Updated last year
• j00ru / windows-syscalls
  Windows System Call Tables (NT/2000/XP/2003/Vista/7/8/10/11)
  ☆2,328Updated last month
• cea-sec / miasm
  Reverse engineering framework in Python
  ☆3,669Updated 4 months ago
• silverf0x / RpcView
  RpcView is a free tool to explore and decompile Microsoft RPC interfaces
  ☆973Updated last year