A set of small utilities, helpers for PIN tracers
☆40Feb 15, 2026Updated 8 months ago
Alternatives and similar repositories for pe_utils
Users that are interested in pe_utils are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Small visualizator for PE files☆70Sep 20, 2023Updated 3 years ago
- A wrapper for capstone for bearparser☆16Oct 8, 2025Updated last year
- A template for projects using both libPeConv and MS Detours☆16Oct 5, 2025Updated last year
- Set of my small utils related to cryptography, encoding, decoding etc☆96Sep 1, 2025Updated last year
- An experimental dynamic malware unpacker based on Intel Pin and PE-sieve☆64Jun 9, 2026Updated 4 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- MalUnpack companion driver☆97Jun 17, 2024Updated 2 years ago
- Golang bindings for PE-sieve☆43Nov 11, 2023Updated 2 years ago
- Python wrappers for mal_unpack☆37Sep 19, 2023Updated 3 years ago
- A simple commandline injector using classic DLL injection☆163Apr 21, 2026Updated 6 months ago
- Flare-On solutions☆37Oct 11, 2019Updated 7 years ago
- A small library helping to parse commandline parameters (for C/C++)☆59Apr 7, 2026Updated 6 months ago
- Packet Injection With WFP☆16Jun 5, 2026Updated 4 months ago
- A simple example how to decrypt kernel debugger data block☆32Feb 8, 2021Updated 5 years ago
- This is a tutorial and introduction to Reflective DLL Injection + reading outputs of injected dll using named pipes.☆20Feb 8, 2025Updated last year
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Archive of ransomware decryptors☆35Dec 7, 2017Updated 8 years ago
- ChimeraPE (a PE injector type - alternative to: RunPE, ReflectiveLoader, etc) - a template for manual loading of EXE, loading imports pay…☆231Mar 22, 2023Updated 3 years ago
- Parser for a custom executable formats from Hidden Bee and Rhadamanthys malware☆60Aug 6, 2025Updated last year
- A ready-made template for a project based on libpeconv.☆54Apr 18, 2026Updated 6 months ago
- Various scripts helpful in sorting collections of malware samples.☆39Aug 19, 2016Updated 10 years ago
- ☆14Sep 24, 2012Updated 14 years ago
- Demos of various (also non standard) persistence methods used by malware☆232Mar 5, 2023Updated 3 years ago
- Set of antianalysis techniques found in malware☆133Aug 25, 2023Updated 3 years ago
- Parsers for custom malware formats ("Funky malware formats")☆97Jan 8, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Logs incoming attempts to connect to NetBIOS/SMB☆15May 15, 2017Updated 9 years ago
- detect hypervisor with Nmi Callback☆42Sep 25, 2022Updated 4 years ago
- all the fun stuff that windows has to offer☆12Jan 23, 2021Updated 5 years ago
- R3劫持所有异常☆14Jan 4, 2021Updated 5 years ago
- ViDi Visual Disassembler (experimental)☆80Oct 8, 2025Updated last year
- Portable Executable parsing library (from PE-bear)☆656Jun 3, 2026Updated 4 months ago
- A process overwriting its own PEB to make an illusion that it has been loaded from a different path.☆100Jun 24, 2021Updated 5 years ago
- A post-processing script for TinyTracer☆40Mar 22, 2023Updated 3 years ago
- Static Library For Windows Drivers☆42Jun 19, 2026Updated 4 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Automatically rebuild Import Address Table for dumped PE file. With python bindings!☆125Jan 25, 2019Updated 7 years ago
- Some of my drawings☆12May 6, 2022Updated 4 years ago
- Utility to remove digital code signature from binary PE files in Windows.☆21Apr 25, 2021Updated 5 years ago
- Yet another variant of Process Hollowing☆475Jul 31, 2025Updated last year
- pg bypass for win10-win11 (learn from NP)☆17Oct 28, 2025Updated last year
- WTL helper library☆59Updated this week
- Some crazy PE executables protection kernel driver☆20May 2, 2020Updated 6 years ago