Popular repositories

1. pe-sieve Public

   Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

   C++ 2.4k 374

2. malware_training_vol1 Public

   Materials for Windows Malware Analysis training (volume 1)

   Assembly 1.8k 177

3. pe-bear Public

   Portable Executable reversing tool with a friendly GUI

   C++ 1.8k 112

4. pe_to_shellcode Public

   Converts PE into a shellcode

   C++ 1.8k 364

5. hollows_hunter Public

   Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

   C 1.6k 235

6. libpeconv Public

   A library to load, manipulate, dump PE files. See also: https://github.com/hasherezade/libpeconv_tpl

   C++ 873 174