Alternatives and similar repositories for pefile-go

Users that are interested in pefile-go are comparing it to the libraries listed below

• thawsystems / docker-ida

  View on GitHub
  Containerized IDA Pro (Windows/Wine), DEPRECIATED, please use https://github.com/NyaMisty/docker-wine-ida
  ☆27Nov 23, 2017Updated 8 years ago
• RobinKastberg / Recomp

  View on GitHub
  IDA recompiler
  ☆31Dec 8, 2014Updated 11 years ago
• j-0-t / murmamau

  View on GitHub
  Fetching data from system
  ☆12Jun 18, 2017Updated 8 years ago
• ssp4rk / threatintel

  View on GitHub
  ☆11Mar 12, 2021Updated 4 years ago
• shun-yo / Spaniel

  View on GitHub
  Malware analysis tool based on taint analysis.
  ☆14Jan 29, 2022Updated 4 years ago
• sebmarchand / pyetw

  View on GitHub
  ☆13Apr 6, 2016Updated 9 years ago
• go-spider / CVE-2018-3252

  View on GitHub
  ☆18Dec 4, 2018Updated 7 years ago
• silascutler / DetuxNG

  View on GitHub
  The Multiplatform Linux Sandbox
  ☆16Dec 19, 2023Updated 2 years ago
• Yara-Rules / YaraRET

  View on GitHub
  Carving tool based in Radare2 & Yara
  ☆17Oct 30, 2018Updated 7 years ago
• robindimyan / MalwareVulnerabilitiesExposures

  View on GitHub
  Malware vulnerability research. Coming soon..
  ☆12Apr 20, 2020Updated 5 years ago
• aaronarduino / goqrsvg

  View on GitHub
  goqrsvg is a Go package that contains an API to do QR Code to SVG conversions
  ☆15Apr 19, 2022Updated 3 years ago
• reverseame / sigcheck

  View on GitHub
  Volatility plugin to validate Authenticode-signed processes, either with embedded signature or catalog-signed
  ☆20Jun 13, 2023Updated 2 years ago
• hillu / go-yara

  View on GitHub
  Go bindings for YARA
  ☆385Jul 1, 2025Updated 7 months ago
• JeremyBlackthorne / PE-Runtime-Data-Structures

  View on GitHub
  ☆18Apr 4, 2019Updated 6 years ago
• svch0stz / velociraptor-detections

  View on GitHub
  ☆22Jan 31, 2023Updated 3 years ago
• NextronSystems / gimphash

  View on GitHub
  Imphash-like calculation on Golang binaries
  ☆49Jul 2, 2022Updated 3 years ago
• Velocidex / go-pe

  View on GitHub
  A Portable Executable parser for Golang
  ☆49Nov 7, 2025Updated 3 months ago
• omarghader / pefile-go

  View on GitHub
  Golang port of pefile
  ☆25Jul 17, 2017Updated 8 years ago
• GDATASoftwareAG / TypeRefHasher

  View on GitHub
  CLI tool to compute the TypeRefHash for .NET binaries.
  ☆19Nov 10, 2021Updated 4 years ago
• tyranid / setsidmapping

  View on GitHub
  Simple tool to use LsaManageSidNameMapping get LSA to add or remove SID to name mappings.
  ☆25Oct 25, 2020Updated 5 years ago
• mandiant / win10_auto

  View on GitHub
  ☆24Aug 30, 2019Updated 6 years ago
• MagnetForensics / rust-lzxpress

  View on GitHub
  Xpress Compression Algorithm
  ☆24Oct 23, 2022Updated 3 years ago
• Cainor / Calendarinho

  View on GitHub
  Manage Your Large Team of Consultants
  ☆11Sep 18, 2025Updated 4 months ago
• hfiref0x / ROCALL

  View on GitHub
  ReactOS x86-32 syscall fuzzer
  ☆58Jul 5, 2025Updated 7 months ago
• smb01 / zxshell

  View on GitHub
  a open source rat from china
  ☆26Oct 28, 2016Updated 9 years ago
• mattifestation / ShellcodeExec

  View on GitHub
  A simple shellcode runner
  ☆22Apr 20, 2014Updated 11 years ago
• CameronAavik / ILject

  View on GitHub
  Provides a way which you can load a .NET dll/exe from disk, modify/inject IL, and then run the assembly all in memory without modifying t…
  ☆29Mar 31, 2017Updated 8 years ago
• BrunoMCBraga / Kernel-Whisperer

  View on GitHub
  ☆29Jan 15, 2021Updated 5 years ago
• msuhanov / ntfs-samples

  View on GitHub
  NTFS samples
  ☆27Aug 1, 2020Updated 5 years ago
• keydet89 / LNK

  View on GitHub
  Repository for LNK stuff
  ☆31Aug 31, 2022Updated 3 years ago
• SentineLabs / Memloader

  View on GitHub
  Memory Loader Open Source Project by Sentinel-Labs.
  ☆25Mar 26, 2021Updated 4 years ago
• sisoma2 / malware_analysis

  View on GitHub
  Scripts, Yara rules and other files developed during malware investigations
  ☆27Aug 19, 2022Updated 3 years ago
• iAbadia / Volatility-Plugin-Tutorial

  View on GitHub
  Development guide for Volatility Plugins
  ☆22Sep 6, 2017Updated 8 years ago
• aerosoul94 / tilutil

  View on GitHub
  Python scripts for parsing IDA TIL files.
  ☆31Jul 16, 2021Updated 4 years ago
• williballenthin / govt

  View on GitHub
  Virustotal API for Go
  ☆65Apr 15, 2019Updated 6 years ago
• Yara-Rules / r2yara

  View on GitHub
  r2yara - Module for Yara using radare2 information
  ☆35Oct 10, 2023Updated 2 years ago
• OSRDrivers / penter

  View on GitHub
  penter hook example and driver time recorder
  ☆31Oct 2, 2017Updated 8 years ago
• jeFF0Falltrades / YARA-Signatures

  View on GitHub
  A collection of my public YARA signatures for various malware families
  ☆30Sep 20, 2024Updated last year
• aff4 / Standard

  View on GitHub
  AFF4 Standard Documents
  ☆29Feb 4, 2022Updated 4 years ago