Alternatives and similar repositories for python-dotnet-binaryformat

Users that are interested in python-dotnet-binaryformat are comparing it to the libraries listed below

• nccgroup / Royal_APT
  Royal APT - APT15 - Related Information from NCC Group Cyber Defense Operations Research
  ☆53Updated 7 years ago
• necst / crave
  Framework to automatically test and explore the capabilities of generic AV engines
  ☆69Updated 6 years ago
• DissectMalware / MalwareCMDMonitor
  Shows command lines used by latest instances analyzed on Hybrid-Analysis
  ☆43Updated 7 years ago
• blacknbunny / peanalyzer
  Advanced Portable Executable File Analyzer And Disassembler 32 & 64 Bit
  ☆100Updated 6 years ago
• ctxis / capemon
  CAPE monitor DLLs
  ☆41Updated 5 years ago
• dungtv543 / Dutas
  Analysis PE file or Shellcode
  ☆50Updated 9 years ago
• techbliss / Yara_Mailware_Quick_menu_scanner
  Work Fast With the pattern matching swiss knife for malware researchers.
  ☆38Updated 9 years ago
• Heurs / parseNTFS
  Simple NTFS crawler.
  ☆56Updated 8 years ago
• adamkramer / jmp2it
  Transfer EIP control to shellcode during malware analysis investigation
  ☆77Updated 11 years ago
• ahhh / YARA
  a collection of yara rules for binary analysis
  ☆24Updated 8 years ago
• alexander-hanel / ida_yara
  A python script that can be used to scan data within in an IDB using Yara.
  ☆23Updated 7 years ago
• libyal / libevt
  Library and tools to access the Windows Event Log (EVT) format
  ☆60Updated last year
• nccgroup / mnemosyne
  A Generic Windows Memory Scraping Tool
  ☆71Updated 8 years ago
• thezdi / scripts
  Generic scripts for public consumption
  ☆85Updated 6 years ago
• naxonez / YaraRules
  Yaras Random
  ☆22Updated 6 years ago
• alexander-hanel / hansel
  Hansel - a simple but flexible search for IDA
  ☆25Updated 6 years ago
• ohjeongwook / ShellCodeEmulator
  Shellcode emulator written with Unicorn Framework With Process Dump Emulation Environment
  ☆124Updated 5 years ago
• mandiant / rvmi-qemu
  QEMU with rVMI extensions
  ☆24Updated 8 years ago
• cysinfo / API-Tracker
  API Tracker by Cysinfo Team
  ☆22Updated 9 years ago
• cryptogramfan / Malware-Analysis-Scripts
  Handy scripts to speed up malware analysis
  ☆35Updated 2 years ago
• Cisco-Talos / CASC
  ☆43Updated 7 years ago
• herrcore / aplib-ripper
  Use this library to automatically extract PE files compressed with aplib from a binary blob.
  ☆34Updated 6 years ago
• jacobsoo / DDE-Extractor
  This script is used for extracting DDE in docx and xlsx
  ☆12Updated 7 years ago
• silascutler / IDA_AutoAnalysis
  IDA Pro plugin that rename functions on load, based on functionality
  ☆19Updated 7 years ago
• nccgroup / WindowsPatchDetector
  Experimental Windows .text section Patch Detector
  ☆22Updated 10 years ago
• aleksost / MemoryDecompression
  Tool to decompress data from Windows 10 page files and memory dumps, that has been compressed by the Windows 10 memory manager.
  ☆51Updated 6 years ago
• jhsmith / flareon
  Random stuff for FlareOn
  ☆14Updated 7 years ago
• GelosSnake / MalwareResearchAPI
  API functions for Malware Research
  ☆35Updated 6 years ago
• zeroSteiner / reflective-polymorphism
  Reflective Polymorphism
  ☆107Updated 7 years ago
• ThisIsSecurity / malware
  ☆43Updated 7 years ago