zed-0xff / pedumpLinks
dump windows PE files using ruby
☆321Updated last month
Alternatives and similar repositories for pedump
Users that are interested in pedump are comparing it to the libraries listed below
Sorting:
- C++ application that uses memory and code hooks to detect packers☆274Updated 7 years ago
- Python code to parse Microsoft PDB files☆331Updated last year
- Portable Executable parsing library (from PE-bear)☆658Updated 3 months ago
- A patch analysis tool☆364Updated 5 years ago
- Persistent IAT hooking application - based on bearparser☆264Updated 3 years ago
- This is the main repository for metasm, a free assembler / disassembler / compiler written in ruby☆471Updated 4 months ago
- Drltrace is a library calls tracer for Windows and Linux applications.☆415Updated 5 years ago
- windows syscall table from xp ~ 10 rs4☆356Updated 7 years ago
- Better version of RunDll with GUI. This program allows you to load DLLs on Windows. You can select how to load the DLL. By direct Entry P…☆239Updated 10 years ago
- x86 Inline hooking engine (using trampolines)☆99Updated 11 years ago
- Virtualbox, VirtualMachine, Cuckoo, Anubis, ThreatExpert, Sandboxie, QEMU, Analysis Tools Detection Tools☆463Updated 7 years ago
- Incident Response & Digital Forensics Debugging Extension☆386Updated 7 years ago
- SmartDec decompiler☆413Updated 4 years ago
- Source from VMDE paper, adapted to 2015☆189Updated 8 years ago
- Windows registry file format specification☆352Updated 7 years ago
- Consonance, a dark color scheme for IDA.☆264Updated 12 years ago
- The ultimate hooking library☆276Updated 4 years ago
- ATrace is a tool for tracing execution of binaries on Windows.☆240Updated last month
- A tool to detect and crash Cuckoo Sandbox☆296Updated last year
- This is a plugin for OllyDbg 1.10 to replace the old disasm engine by Capstone disassembly/disassembler framework.☆79Updated 10 years ago
- A pintool in order to unpack malware☆237Updated 9 years ago
- Basically a script thrift shop☆590Updated 3 years ago
- Labeless is a multipurpose IDA Pro plugin system for labels/comments synchronization with a debugger backend, with complex memory dumping…☆570Updated 11 months ago
- A tool to help when dealing with Windows IOCTL codes or reversing Windows drivers.☆438Updated 7 years ago
- A set of tutorials about code injection for Windows.☆313Updated last year
- flare-dbg is a project meant to aid malware reverse engineers in rapidly developing debugger scripts.☆150Updated 8 years ago
- Python scripts for reverse engineering.☆186Updated 4 years ago
- Windows XP 32-Bit Bootkit☆146Updated 11 years ago
- This project aims at simplifying Windows API import recovery on arbitrary memory dumps☆262Updated 2 years ago
- Windows API tracer for malware (oldname: unitracer)☆120Updated 8 years ago