Alternatives and similar repositories for pe_tree:

Users that are interested in pe_tree are comparing it to the libraries listed below

• mandiant / speakeasy
  Windows kernel and user mode emulation.
  ☆1,620Updated last month
• malrev / ABD
  Course materials for Advanced Binary Deobfuscation by NTT Secure Platform Laboratories
  ☆1,114Updated 4 years ago
• hasherezade / pe-sieve
  Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-mem…
  ☆3,260Updated 2 weeks ago
• thalium / icebox
  Virtual Machine Introspection, Tracing & Debugging
  ☆578Updated 3 years ago
• rabbitstack / fibratus
  Adversary tradecraft detection, protection, and hunting
  ☆2,285Updated this week
• qilingframework / qiling
  A True Instrumentable Binary Emulation Framework
  ☆5,340Updated last week
• gaasedelen / lighthouse
  A Coverage Explorer for Reverse Engineers
  ☆2,338Updated 8 months ago
• OpenRCE / Malware-Analysis-Training
  Retired beginner/intermediate malware analysis training materials from @pedramamini and @erocarrera.
  ☆893Updated 5 years ago
• mandiant / flare-ida
  IDA Pro utilities from FLARE team
  ☆2,295Updated 5 months ago
• gaasedelen / tenet
  A Trace Explorer for Reverse Engineers
  ☆1,378Updated last year
• AllsafeCyberSecurity / awesome-ghidra
  A curated list of awesome Ghidra materials
  ☆1,231Updated 3 years ago
• JusticeRage / Manalyze
  A static analyzer for PE executables.
  ☆1,048Updated last year
• mandiant / flare-floss
  FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
  ☆3,468Updated 3 weeks ago
• Cisco-Talos / pyrebox
  Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU
  ☆1,662Updated last year
• taviso / ctftool
  Interactive CTF Exploration Tool
  ☆1,654Updated 3 years ago
• unipacker / unipacker
  Automatic and platform-independent unpacker for Windows binaries based on emulation
  ☆686Updated 6 months ago
• horsicq / XPEViewer
  PE file viewer/editor for Windows, Linux and MacOS.
  ☆1,054Updated this week
• hugsy / defcon_27_windbg_workshop
  DEFCON 27 workshop - Modern Debugging with WinDbg Preview
  ☆719Updated 5 months ago
• hasherezade / hollows_hunter
  Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks,…
  ☆2,131Updated last month
• hasherezade / pe-bear-releases
  PE-bear (builds only)
  ☆775Updated last year
• mandiant / flare-fakenet-ng
  FakeNet-NG - Next Generation Dynamic Network Analysis Tool
  ☆1,883Updated this week
• airbus-seclab / bincat
  Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free…
  ☆1,762Updated last month
• VirusTotal / yara-python
  The Python interface for YARA
  ☆683Updated 2 weeks ago
• fr0gger / awesome-ida-x64-olly-plugin
  A curated list of IDA x64DBG, Ghidra and OllyDBG plugins.
  ☆1,358Updated 10 months ago
• googleprojectzero / sandbox-attacksurface-analysis-tools
  Set of tools to analyze Windows sandboxes for exposed attack surface.
  ☆2,134Updated 3 months ago
• j00ru / windows-syscalls
  Windows System Call Tables (NT/2000/XP/2003/Vista/7/8/10/11)
  ☆2,280Updated last month
• cea-sec / miasm
  Reverse engineering framework in Python
  ☆3,602Updated 2 months ago
• bootleg / ret-sync
  ret-sync is a set of plugins that helps to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg2/x64dbg) with IDA/Ghidra/Binary Ninja…
  ☆2,115Updated last year
• joxeankoret / diaphora
  Diaphora, the most advanced Free and Open Source program diffing tool.
  ☆3,784Updated 4 months ago
• alexandreborges / malwoverview
  Malwoverview is a first response tool used for threat hunting and offers intel information from Virus Total, Hybrid Analysis, URLHaus, Po…
  ☆3,142Updated 2 months ago