Alternatives and similar repositories for pe_tree:

Users that are interested in pe_tree are comparing it to the libraries listed below

• mandiant / speakeasy
  Windows kernel and user mode emulation.
  ☆1,620Updated last month
• hasherezade / pe-bear-releases
  PE-bear (builds only)
  ☆775Updated last year
• horsicq / XPEViewer
  PE file viewer/editor for Windows, Linux and MacOS.
  ☆1,054Updated this week
• taviso / ctftool
  Interactive CTF Exploration Tool
  ☆1,655Updated 3 years ago
• malrev / ABD
  Course materials for Advanced Binary Deobfuscation by NTT Secure Platform Laboratories
  ☆1,114Updated 4 years ago
• horsicq / Nauz-File-Detector
  Linker/Compiler/Tool detector for Windows, Linux and MacOS.
  ☆548Updated this week
• hasherezade / tiny_tracer
  A Pin Tool for tracing API calls etc
  ☆1,399Updated 2 months ago
• gaasedelen / lighthouse
  A Coverage Explorer for Reverse Engineers
  ☆2,338Updated 8 months ago
• gaasedelen / tenet
  A Trace Explorer for Reverse Engineers
  ☆1,378Updated last year
• mandiant / flare-ida
  IDA Pro utilities from FLARE team
  ☆2,295Updated 5 months ago
• hasherezade / pe-sieve
  Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-mem…
  ☆3,260Updated 2 weeks ago
• fr0gger / awesome-ida-x64-olly-plugin
  A curated list of IDA x64DBG, Ghidra and OllyDBG plugins.
  ☆1,358Updated 10 months ago
• everdox / InfinityHook
  Hook system calls, context switches, page faults and more.
  ☆2,513Updated last year
• Cisco-Talos / pyrebox
  Python scriptable Reverse Engineering Sandbox, a Virtual Machine instrumentation and inspection framework based on QEMU
  ☆1,662Updated last year
• mandiant / flare-fakenet-ng
  FakeNet-NG - Next Generation Dynamic Network Analysis Tool
  ☆1,883Updated this week
• unipacker / unipacker
  Automatic and platform-independent unpacker for Windows binaries based on emulation
  ☆686Updated 6 months ago
• mandiant / flare-floss
  FLARE Obfuscated String Solver - Automatically extract obfuscated strings from malware.
  ☆3,476Updated this week
• hasherezade / pe-bear
  Portable Executable reversing tool with a friendly GUI
  ☆2,961Updated 3 weeks ago
• airbus-seclab / bincat
  Binary code static analyser, with IDA integration. Performs value and taint analysis, type reconstruction, use-after-free and double-free…
  ☆1,762Updated last month
• mohuihui / antispy
  AntiSpy is a free but powerful anti virus and rootkits toolkit.It offers you the ability with the highest privileges that can detect,anal…
  ☆1,096Updated 3 years ago
• erocarrera / pefile
  pefile is a Python module to read and work with PE (Portable Executable) files
  ☆1,921Updated 7 months ago
• joxeankoret / diaphora
  Diaphora, the most advanced Free and Open Source program diffing tool.
  ☆3,784Updated 4 months ago
• j00ru / windows-syscalls
  Windows System Call Tables (NT/2000/XP/2003/Vista/7/8/10/11)
  ☆2,280Updated last month
• hasherezade / libpeconv
  A library to load, manipulate, dump PE files. See also: https://github.com/hasherezade/libpeconv_tpl
  ☆1,189Updated 3 weeks ago
• thalium / icebox
  Virtual Machine Introspection, Tracing & Debugging
  ☆578Updated 3 years ago
• silverf0x / RpcView
  RpcView is a free tool to explore and decompile Microsoft RPC interfaces
  ☆961Updated last year
• googleprojectzero / winafl
  A fork of AFL for fuzzing Windows binaries
  ☆2,412Updated last week
• SafeBreach-Labs / pinjectra
  Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)
  ☆806Updated 3 years ago
• idapython / src
  IDAPython project for Hex-Ray's IDA Pro
  ☆1,470Updated 2 weeks ago
• bootleg / ret-sync
  ret-sync is a set of plugins that helps to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg2/x64dbg) with IDA/Ghidra/Binary Ninja…
  ☆2,115Updated last year