Search Results for "pe"
Sort By:
Showing 31 open source projects for "pe"
View related business solutions-
Custom VMs From 1 to 96 vCPUs With 99.95% UptimeLive migration and automatic failover keep workloads online through maintenance. One free e2-micro VM every month.
-
Paessler: Easy to Use With Enterprise Power. Free TrialYou shouldn't have to choose between a monitoring tool that's easy to use and one that's powerful enough for a complex environment. PRTG's low-code interface lets any admin build dashboards, set alerts and monitor devices without scripting, while custom sensors and full API access are there when your team needs deeper control. One platform, no compromise. Download a free 30-day trial now.
-
1
Portable Executable Parser
lightweight Go package to parse, analyze and extract metadata
Saferwall PE is a lightweight Go package for parsing, analyzing, and extracting metadata from Portable Executable (PE) binaries. Designed with malware analysis in mind, it is robust against malformed PE files and provides detailed insights into executable structures. -
2
hollows_hunter
Recognizes and dumps a variety of potentially malicious implants
Hollows Hunter is a command-line malware analysis tool based on the PE-sieve passive memory scanner. It scans running processes, or even the full system, to identify potentially malicious implants. The tool can recognize and dump suspicious artifacts such as replaced PEs, injected PEs, shellcode, hooks, and in-memory patches. Unlike PE-sieve’s more process-specific workflow, Hollows Hunter can select targets using broader criteria such as process IDs, process names, or creation time. ... -
3
LIEF
LIEF - Library to Instrument Executable Formats (C++, Python, Rust)
LIEF (Library to Instrument Executable Formats) is a cross-platform library that enables parsing, modifying, and abstracting executable formats such as ELF, PE, and Mach-O. It's widely used in reverse engineering and binary analysis. -
4
OpenCorePkg
OpenCore bootloader
...It includes Apple-specific UEFI drivers, utilities for macOS installation support, and shared libraries used across Acidanthera projects. Apple disk image loading support. Apple keyboard input aggregation. Apple PE image signature verification. Apple UEFI secure boot supplemental code. Audio management with screen reading support. Basic ACPI and SMBIOS manipulation. -
Ship Agents FasterGemini Enterprise Agent Platform lets you rapidly build, scale, govern and optimize production-ready agents grounded in your organization's data. The platform enables developers to build custom or pre-built agents for virtually any use case. New customers get $300 in free credits.
-
5
The RAD Debugger Project
A native, user-mode, multi-process, graphical debugger
...PDB information is converted into the project’s custom RAD Debug Info format for faster and more controlled processing. The repository also contains radbin, utilities for inspecting and converting binary information. A related RAD Linker targets large x64 PE/COFF programs and can produce either standard PDB or native RDI data. The project remains in alpha while prioritizing reliability, performance, stepping, evaluation, process control, and large-project compile-debug workflows. -
6
REDasm
The Open Source Disassembler
...It supports various CPU architectures and executable formats and also offers an interactive listing, control flow graph view, cross-references, string detection and automatic function recovery. [SUPPORTED FILE FORMATS] PE, ELF, MZ, NE, LE, PSX-EXE, PSX-BIOS, XBE (Xbox), ZX Spectrum (SNA, Z80, TAP), iNES (mapper 0 only) [SUPPORTED ARCHITECTURES] x86/x86_64, ARM/THUMB, AArch64, Z80, MOS6502 [EXTRA FEATURES] VB5/6 Decompiler, MSVC RTTI and EH (EXPERIMENTAL) For detailed tier list of every feature see https://redasm.dev -
7
PowerHub
A post exploitation tool based on a web application
PowerHub is a PowerShell-based automation framework designed to centralize and orchestrate common administrative tasks across Windows environments. It exposes a modular command set for inventorying systems, managing services, deploying packages, and executing remote commands with consistent logging and error handling. The project places emphasis on discoverability and reuse: scripts are organized into reusable modules and functions with clear parameter contracts so teams can compose... -
8
Qiling
Qiling Advanced Binary Emulation Framework
Cross-platform and multi-arch ultra lightweight emulator. Supported OS: Linux, MacOS, Windows, FreeBSD, DOS and UEFI. Support Arch: x86(16/32/64), ARM(64) MIPS, EVM and WASM. It also support Linux Kernel Module(.ko) , Windows Driver(.sys) and MacOS Kernel(.kext) via Demigod. Binary instrumentation and API are Qiling Framework's main focus and priority. It is designed for reverse engineers - thus there is no need to rebuild another sand boxing tool. Using Qiling Framework saves you time. The... -
9
readpe
The PE file analysis toolkit
readpe (formerly known as pev) is a multiplatform toolkit to work with PE (Portable Executable) binaries. Its main goal is to provide feature-rich tools for properly analyze binaries with a strong focus on suspicious ones. -
Demo Series - Small Business Backup By VeeamWatch this on-demand demo series and learn how to protect your Microsoft 365 data with clear, simple, actionable steps that are easy to implement for businesses of all sizes.
-
10
Distro_Boot
download iso's from distrowatch and boot them with qemu
Dow load and boot ISO or IMG images from distrowatch and boot them in a virtual PC environment. Currently the app supports about 90 different linux iso's out of the box but feel free to use this tool to test your own iso's (windows 10, 11, PE, etc). This is my way of attempting to inplement what 've learned in the past 10 months with stuff that I already know well. I hope you find this interesting. feel free to leave me a comment /thumbs up even hatemail is acceptable at this point. if you hate it please tell me too :) -
11
RedtDec
RetDec is a retargetable machine-code decompiler based on LLVM
The decompiler is not limited to any particular target architecture, operating system, or executable file format. ELF, PE, Mach-O, COFF, AR (archive), Intel HEX, and raw machine code supported. 32-bit: Intel x86, ARM, MIPS, PIC32, and PowerPC 64-bit: x86-64 supported. Demangling of symbols from C++ binaries (GCC, MSVC, Borland). Reconstruction of functions, types, and high-level constructs. Output in two high-level languages: C and a Python-like language. -
12
Miasm
Reverse engineering framework in Python
The Miasm intermediate representation is used for multiple task: emulation through its jitter engine, symbolic execution, DSE, program analysis, but the intermediate representation can be a bit hard to read. We will present in this article new tricks Miasm has learned in 2018. Among them, the SSA/Out-of-SSA transformation, expression propagation and high-level operators can be joined to “lift” Miasm IR to a more human-readable language. We use graphviz to illustrate some graphs. Its layout... -
13
fooltrader
Quant framework for stock
Build a standard data schema, and then implement various connectors to import systems you are familiar with for analysis. fooltrader is a quantitative analysis trading system designed using big data technology, including data capture, cleaning, structuring, calculation, display, backtesting and trading. Its goal is to provide a unified framework for the whole market (stock, futures, bonds, foreign exchange, digital currency, macroeconomics, etc.) for research, backtesting, forecasting, and... -
14
pe_version
Getting file version of PE-32 EXE files
This small console utility takes as argument a path to EXE file (in Windows PE-32 format) and prints to STDOUT the file version from resource section. -
15
PowerSploit PowerShell
A PowerShell Post-Exploitation Framework
PowerSploit is a collection of PowerShell modules that historically served as a toolkit for post-exploitation tasks, red-team exercises, and offensive-security research—covering areas like reconnaissance, lateral movement, persistence, and situational awareness. The repository bundles many focused scripts: code to enumerate system and Active Directory information, payload generation helpers, in-memory execution utilities, and modules to interact with credentials and services. Because the... -
16
JWasm
Japheth's assembler, JWasm
JWasm is a free MASM-compatible assembler with these features: native support for output formats Intel OMF, MS Coff (32/64-bit), Elf (32/64-bit), Binary, Windows PE (32/64-bit) and DOS MZ. precompiled JWasm binaries are available for DOS, Windows and Linux. For OS/2 and FreeBSD, makefiles are supplied. Instructions up to AVX are supported. JWasm is written in C. The source is portable and has successfully been tested with Open Watcom, MS VC, GCC and more. As far as programming for MS Windows is concerned, JWasm can be used with both WinInc (32/64-bit) and Masm32 (32-bit). ... -
17
Libry Compiler 4.1
Libry Compiler 4.1
.... *---------------------------------------------------------* |Libry Compiler 4.1 Documentation (c) by Kinex Development| Introduction: ----------------------------------------------------------- Libry Compiler is a 32-Bit Compiler which compiles directly into machine code and produces a small PE file. Libry's syntax is in a style of C language. Produced executables don't need any runtime because it is pure machine code. ----------------------------------------------------------- Variables: ----------------------------------------------------------- - Directive 'byte' * Description: Reserve a byte. -> byte <Identifier> [optional: = <Number>] ; - Directive 'int' * Description: Reserve a word. -> int <Identifier> [optional: = <Number>] ; - Directive 'dword' * Description: Reser -
18
FenixSped
Integração com Webservers do Projeto Sped, NFSe e GNRE
...Pode ser utilizado como biblioteca com funções prontas ou chamar via linha de comandos para assinatura digital, validações e comunicações com webservices. NFe 3.10 NFSe Abrasf, DSF e ISS.NET GNRE-PE -
19
-
20
Open Utlity
Open Utlity is series of unix utlity just like gnu for linux / windows
Open Utility is series of Unix utility which is currently in development.currently it has a c compiler which is based on early unix c compiler.later versions like v1 or later has in build assambler and linker.it can be used in place of gcc it is good alternative of gnu c compiler -
21
BEYE (Binary EYE) is a free, portable, advanced file viewer with built-in editor for binary, hexadecimal and disassembler modes. It contains a highlight AVR/Java/i86-AMD64/ARM-XScale/PPC-64 and other disassembler, full preview of MZ,NE,PE,ELF and other.
-
22
A Python programming environment providing memory sizing, profiling and analysis, and a specification language that can formally specify aspects of Python programs and generate tests and documentation from a common source.
-
23
Pokas x86 Emulator is an Application-Only emulator created for generic unpacking and testing the antivirus detection algorithms. it emulates the PE Executable Files 32-bits versions and monitor all memory writes and include many features. AmrThabet
-
24
Fast and efficient self-assembling 80x86 assembler for DOS/Win32/Linux; with 8086-80486/Pentium/MMX/SSE/AVX/XOP instructions support, 16-bit/32-bit/64-bit code, binary/MZ/PE/COFF/ELF output formats.
-
25
The EXT Library is set of various useful classes, templates and macros that extend functionality provided by ISO C++ (ext sub-library), standard C and C++ library (lib), to abstract parts of Windows API (win) and access PE file resources (res).
