folbricht / pefile

Related projects ⓘ

Alternatives and complementary repositories for pefile

• Velocidex / go-ntfs
  An NTFS file parser in Go
  ☆64Updated this week
• Velocidex / go-pe
  A Portable Executable parser for Golang
  ☆47Updated last year
• soluwalana / pefile-go
  Golang port of PEFile
  ☆29Updated 4 years ago
• Binject / forger
  ☆20Updated 5 years ago
• gentlemanautomaton / volmgmt
  Windows Volume Management libraries for the Go language
  ☆26Updated last year
• t9t / gomft
  NTFS Master File Table (MFT) parser for Go.
  ☆40Updated 3 months ago
• Velocidex / oleparse
  Golang parser for OLE files
  ☆31Updated 5 months ago
• forensicanalysis / fslib
  📚 A collection of tools and libraries to parse filesystems, archives and other data types
  ☆20Updated last month
• VirusTotal / gyp
  gyp: A pure Go YARA parser
  ☆102Updated 8 months ago
• saferwall / elf
  Go library to parse Executable and Linkable Format (ELF) files.
  ☆41Updated 4 months ago
• lsegal / cppgo
  Call virtual methods on C++ classes from Go without cgo.
  ☆81Updated 9 months ago
• audibleblink / dllexical
  easy dll proxying in go
  ☆13Updated 2 years ago
• tdakkota / win32metadata
  win32metadata is Windows metadata parser
  ☆15Updated last week
• can1357 / gengo
  Generate Go bindings for shared C libraries.
  ☆14Updated 4 months ago
• petemoore / ntr
  An open source alternative to ntrights.exe to allow manipulation of LSA policy on windows
  ☆9Updated 4 years ago
• knightsc / gapstone
  gapstone is a Go binding for the capstone disassembly library
  ☆68Updated 3 years ago
• Velocidex / go-ese
  Go implementation of an Extensible Storage Engine parser
  ☆27Updated 2 months ago
• VirusTotal / go-yara
  Go bindings for YARA
  ☆17Updated 2 years ago
• cubiclesoft / windows-pe-artifact-library
  Contains over 375 samples of Windows Portable Executable (PE) files ranging from the common to the completely esoteric with detailed orig…
  ☆33Updated 2 months ago
• TheTitanrain / w32
  A wrapper of windows apis for the Go Programming Language.
  ☆42Updated 4 years ago
• xrw67 / rdpp
  A C++ RDP implement, base RDPY
  ☆17Updated 5 months ago
• nccgroup / pythia
  A tool to extract RTTI information from Delphi executables, written in pure Python
  ☆22Updated 4 years ago
• a-palchikov / wmi
  tiny wrapper around Windows Management Instrumentation API
  ☆13Updated 6 years ago
• mrexodia / YaraGen
  Plugin for x64dbg to generate Yara rules from function basic blocks.
  ☆35Updated 7 years ago
• castaneai / hinako
  x86 WinAPI hook written in pure Go
  ☆49Updated 4 years ago
• ex0dus-0x / ward
  Simple ELF runtime packer for creating self-protecting binaries
  ☆18Updated last year
• saferwall / pe
  A lightweight Go package to parse, analyze and extract metadata from Portable Executable (PE) binaries. Designed for malware analysis ta…
  ☆321Updated last week
• kbinani / win
  WinAPI wrapper (and wrapper generator) for Go
  ☆61Updated 7 years ago
• waleedassar / TimeDateStamp
  Discover TimeDateStamps In PE File
  ☆16Updated 8 years ago
• 0xrawsec / golang-win32
  Golang wrappers functions to call Windows APIs
  ☆73Updated 2 years ago