zed-0xff / pedump
dump windows PE files using ruby
☆311Updated 4 months ago
Related projects ⓘ
Alternatives and complementary repositories for pedump
- C++ application that uses memory and code hooks to detect packers☆268Updated 6 years ago
- Portable Executable parsing library (from PE-bear)☆648Updated 2 months ago
- This is the main repository for metasm, a free assembler / disassembler / compiler written in ruby☆462Updated 3 weeks ago
- Windows registry file format specification☆325Updated 6 years ago
- Incident Response & Digital Forensics Debugging Extension☆371Updated 5 years ago
- Source from VMDE paper, adapted to 2015☆176Updated 6 years ago
- Labeless is a multipurpose IDA Pro plugin system for labels/comments synchronization with a debugger backend, with complex memory dumping…☆515Updated 2 years ago
- windows syscall table from xp ~ 10 rs4☆349Updated 6 years ago
- Consonance, a dark color scheme for IDA.☆261Updated 11 years ago
- Persistent IAT hooking application - based on bearparser☆247Updated 2 years ago
- PowerLoaderEx - Advanced Code Injection Technique for x32 / x64☆359Updated 7 years ago
- Principled, lightweight C/C++ PE parser☆801Updated 5 months ago
- WinDBG Anti-RootKit Extension☆615Updated 4 years ago
- A patch analysis tool☆359Updated 4 years ago
- Dynamic IDA Enrichment☆468Updated 2 years ago
- x86 Inline hooking engine (using trampolines)☆92Updated 9 years ago
- ATrace is a tool for tracing execution of binaries on Windows.☆235Updated 8 years ago
- Python code to parse Microsoft PDB files☆316Updated 3 months ago
- The ultimate hooking library☆253Updated 3 years ago
- Better version of RunDll with GUI. This program allows you to load DLLs on Windows. You can select how to load the DLL. By direct Entry P…☆233Updated 9 years ago
- SmartDec decompiler☆397Updated 3 years ago
- Debug Child Process Tool (auto attach)☆271Updated last year
- Virtualbox, VirtualMachine, Cuckoo, Anubis, ThreatExpert, Sandboxie, QEMU, Analysis Tools Detection Tools☆442Updated 5 years ago
- Python scripts for reverse engineering.☆179Updated 3 years ago
- DriverBuddy is an IDA Python script to assist with the reverse engineering of Windows kernel drivers.☆352Updated 4 years ago
- A set of tutorials about code injection for Windows.☆305Updated 2 months ago
- A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.☆422Updated 6 years ago
- ☆939Updated 2 months ago
- IDA Pro Instruction Reference Plugin☆636Updated 3 years ago
- YaCo is an Hex-Rays IDA plugin. When enabled, multiple users can work simultaneously on the same binary. Any modification done by any use…☆315Updated 5 years ago