Search Results for "pe"
Sort By:
Showing 52 open source projects for "pe"
View related business solutions-
Save Up to 91% on Cloud Compute With Spot VMsRun batch jobs at 60-91% off with Spot VMs. Long-running workloads get automatic discounts with sustained use.
-
$300 Free Credits to Build on Google CloudPut your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.
-
1
Portable Executable Parser
lightweight Go package to parse, analyze and extract metadata
Saferwall PE is a lightweight Go package for parsing, analyzing, and extracting metadata from Portable Executable (PE) binaries. Designed with malware analysis in mind, it is robust against malformed PE files and provides detailed insights into executable structures. -
2
hollows_hunter
Recognizes and dumps a variety of potentially malicious implants
Hollows Hunter is a command-line malware analysis tool based on the PE-sieve passive memory scanner. It scans running processes, or even the full system, to identify potentially malicious implants. The tool can recognize and dump suspicious artifacts such as replaced PEs, injected PEs, shellcode, hooks, and in-memory patches. Unlike PE-sieve’s more process-specific workflow, Hollows Hunter can select targets using broader criteria such as process IDs, process names, or creation time. ... -
3
LIEF
LIEF - Library to Instrument Executable Formats (C++, Python, Rust)
LIEF (Library to Instrument Executable Formats) is a cross-platform library that enables parsing, modifying, and abstracting executable formats such as ELF, PE, and Mach-O. It's widely used in reverse engineering and binary analysis. -
4
OpenCorePkg
OpenCore bootloader
...It includes Apple-specific UEFI drivers, utilities for macOS installation support, and shared libraries used across Acidanthera projects. Apple disk image loading support. Apple keyboard input aggregation. Apple PE image signature verification. Apple UEFI secure boot supplemental code. Audio management with screen reading support. Basic ACPI and SMBIOS manipulation. -
MongoDB Atlas runs apps anywhereMongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
-
5
The RAD Debugger Project
A native, user-mode, multi-process, graphical debugger
...PDB information is converted into the project’s custom RAD Debug Info format for faster and more controlled processing. The repository also contains radbin, utilities for inspecting and converting binary information. A related RAD Linker targets large x64 PE/COFF programs and can produce either standard PDB or native RDI data. The project remains in alpha while prioritizing reliability, performance, stepping, evaluation, process control, and large-project compile-debug workflows. -
6
REDasm
The Open Source Disassembler
...It supports various CPU architectures and executable formats and also offers an interactive listing, control flow graph view, cross-references, string detection and automatic function recovery. [SUPPORTED FILE FORMATS] PE, ELF, MZ, NE, LE, PSX-EXE, PSX-BIOS, XBE (Xbox), ZX Spectrum (SNA, Z80, TAP), iNES (mapper 0 only) [SUPPORTED ARCHITECTURES] x86/x86_64, ARM/THUMB, AArch64, Z80, MOS6502 [EXTRA FEATURES] VB5/6 Decompiler, MSVC RTTI and EH (EXPERIMENTAL) For detailed tier list of every feature see https://redasm.dev -
7
PowerHub
A post exploitation tool based on a web application
PowerHub is a PowerShell-based automation framework designed to centralize and orchestrate common administrative tasks across Windows environments. It exposes a modular command set for inventorying systems, managing services, deploying packages, and executing remote commands with consistent logging and error handling. The project places emphasis on discoverability and reuse: scripts are organized into reusable modules and functions with clear parameter contracts so teams can compose... -
8
Qiling
Qiling Advanced Binary Emulation Framework
Cross-platform and multi-arch ultra lightweight emulator. Supported OS: Linux, MacOS, Windows, FreeBSD, DOS and UEFI. Support Arch: x86(16/32/64), ARM(64) MIPS, EVM and WASM. It also support Linux Kernel Module(.ko) , Windows Driver(.sys) and MacOS Kernel(.kext) via Demigod. Binary instrumentation and API are Qiling Framework's main focus and priority. It is designed for reverse engineers - thus there is no need to rebuild another sand boxing tool. Using Qiling Framework saves you time. The... -
9
ArkDeployToolkit
WinPE deployment toolkit for deploying and capturing Windows images.
A lightweight Windows PE deployment toolkit for deploying and capturing Windows images using Microsoft's Deployment Image Servicing and Management (DISM). ArkDeploy Toolkit is a free, open-source Windows deployment toolkit designed for IT professionals who prefer simple, transparent imaging workflows over large enterprise deployment platforms. Developed from real-world OEM Windows deployment experience, ArkDeploy Toolkit focuses on simple, repeatable imaging workflows built on standard Microsoft deployment technologies. -
Build Agents and Models on One PlatformGemini Enterprise Agent Platform is Google Cloud's comprehensive platform for developers to build, scale, govern, and optimize agents and models. Choose from Google's most advanced models and third-party models like Anthropic's Claude Model Family.
-
10
readpe
The PE file analysis toolkit
readpe (formerly known as pev) is a multiplatform toolkit to work with PE (Portable Executable) binaries. Its main goal is to provide feature-rich tools for properly analyze binaries with a strong focus on suspicious ones. -
11
PE Scanner is a software for catching / modifying / analysis of portable executable (patform: Windows XP & above). Also, all PEiD's plugins are compatible to be load and run.
-
12
Distro_Boot
download iso's from distrowatch and boot them with qemu
Dow load and boot ISO or IMG images from distrowatch and boot them in a virtual PC environment. Currently the app supports about 90 different linux iso's out of the box but feel free to use this tool to test your own iso's (windows 10, 11, PE, etc). This is my way of attempting to inplement what 've learned in the past 10 months with stuff that I already know well. I hope you find this interesting. feel free to leave me a comment /thumbs up even hatemail is acceptable at this point. if you hate it please tell me too :) -
13
RedtDec
RetDec is a retargetable machine-code decompiler based on LLVM
The decompiler is not limited to any particular target architecture, operating system, or executable file format. ELF, PE, Mach-O, COFF, AR (archive), Intel HEX, and raw machine code supported. 32-bit: Intel x86, ARM, MIPS, PIC32, and PowerPC 64-bit: x86-64 supported. Demangling of symbols from C++ binaries (GCC, MSVC, Borland). Reconstruction of functions, types, and high-level constructs. Output in two high-level languages: C and a Python-like language. -
14
Dependencies
A rewrite of the old legacy software "depends.exe" in C# for Windows
...Dependencies also bundle ClrPhTester.exe, a dumpbin-like executable used to test for non-regressions. Dependencies currently does not recursively resolve child imports when parsing a new PE since it can be really memory-hungry to do so ( it can over a GB even for "simple" PEs ). -
15
Miasm
Reverse engineering framework in Python
The Miasm intermediate representation is used for multiple task: emulation through its jitter engine, symbolic execution, DSE, program analysis, but the intermediate representation can be a bit hard to read. We will present in this article new tricks Miasm has learned in 2018. Among them, the SSA/Out-of-SSA transformation, expression propagation and high-level operators can be joined to “lift” Miasm IR to a more human-readable language. We use graphviz to illustrate some graphs. Its layout... -
16
VersionInfo
Generate file version information
This command-line utility produces a report of file information including version information where available. The reports can be useful for release information, manifests, and integrity verification. -
17
fooltrader
Quant framework for stock
Build a standard data schema, and then implement various connectors to import systems you are familiar with for analysis. fooltrader is a quantitative analysis trading system designed using big data technology, including data capture, cleaning, structuring, calculation, display, backtesting and trading. Its goal is to provide a unified framework for the whole market (stock, futures, bonds, foreign exchange, digital currency, macroeconomics, etc.) for research, backtesting, forecasting, and... -
18
PE Repair
Repair and Visual PE-files
...The main purpose is to assist you when making files dumped from memory runnable and later one more nice by optimize the file size or find garbage that can be removed. At the current state PE Repair is a kind of prototype to try out new things or do little quick fixes. Feel free to adopt the idea and rewrite ya own PE-Tool. -
19
pe_version
Getting file version of PE-32 EXE files
This small console utility takes as argument a path to EXE file (in Windows PE-32 format) and prints to STDOUT the file version from resource section. -
20
PowerSploit
A PowerShell Post-Exploitation Framework
PowerSploit is a PowerShell-based post‑exploitation framework widely used by penetration testers, red‑teamers, and security researchers. It includes modules for code execution, introspection, lateral movement, persistence, and data exfiltration—deeply integrated into Windows environments. -
21
PowerSploit PowerShell
A PowerShell Post-Exploitation Framework
PowerSploit is a collection of PowerShell modules that historically served as a toolkit for post-exploitation tasks, red-team exercises, and offensive-security research—covering areas like reconnaissance, lateral movement, persistence, and situational awareness. The repository bundles many focused scripts: code to enumerate system and Active Directory information, payload generation helpers, in-memory execution utilities, and modules to interact with credentials and services. Because the... -
22
JWasm
Japheth's assembler, JWasm
JWasm is a free MASM-compatible assembler with these features: native support for output formats Intel OMF, MS Coff (32/64-bit), Elf (32/64-bit), Binary, Windows PE (32/64-bit) and DOS MZ. precompiled JWasm binaries are available for DOS, Windows and Linux. For OS/2 and FreeBSD, makefiles are supplied. Instructions up to AVX are supported. JWasm is written in C. The source is portable and has successfully been tested with Open Watcom, MS VC, GCC and more. As far as programming for MS Windows is concerned, JWasm can be used with both WinInc (32/64-bit) and Masm32 (32-bit). ... -
23
Libry Compiler 4.1
Libry Compiler 4.1
.... *---------------------------------------------------------* |Libry Compiler 4.1 Documentation (c) by Kinex Development| Introduction: ----------------------------------------------------------- Libry Compiler is a 32-Bit Compiler which compiles directly into machine code and produces a small PE file. Libry's syntax is in a style of C language. Produced executables don't need any runtime because it is pure machine code. ----------------------------------------------------------- Variables: ----------------------------------------------------------- - Directive 'byte' * Description: Reserve a byte. -> byte <Identifier> [optional: = <Number>] ; - Directive 'int' * Description: Reserve a word. -> int <Identifier> [optional: = <Number>] ; - Directive 'dword' * Description: Reser -
24
FenixSped
Integração com Webservers do Projeto Sped, NFSe e GNRE
...Pode ser utilizado como biblioteca com funções prontas ou chamar via linha de comandos para assinatura digital, validações e comunicações com webservices. NFe 3.10 NFSe Abrasf, DSF e ISS.NET GNRE-PE -
25
PE objdump
Tool to find symbols in windows Library or Executable
It reads windows Portable Executable file format. DLL & EXE . Coming up with support for name de-mangling Portable Tested on Linux/ SunOS/ Windows - VS10 / Mac You might also want to check https://sourceforge.net/projects/core-dump-analyzer
