awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
hasherezade avatar

hasherezade/pe-bear

0
View on GitHub↗
3,684 stars·238 forks·C++·GPL-2.0·18 viewshshrzd.wordpress.com/pe-bear↗

Pe Bear

PE-bear is a graphical portable executable analysis tool designed for inspecting, disassembling, and modifying the structure of Windows PE binary files. It functions as a static analysis framework used to identify malicious patterns and reverse engineer program logic.

The project provides a binary diffing tool to identify structural and content differences between two executable files. It also includes a section editor for modifying binary layouts by adding or altering sections and imports.

The tool covers a range of binary analysis capabilities, including machine code disassembly, file layout inspection, and signature-based pattern matching to identify compression tools.

Features

  • Portable Executable Analyzers - Provides a comprehensive graphical utility for inspecting, disassembling, and modifying Windows PE binary files.
  • PE Section Editors - Allows modifying the layout of binary files by adding or altering sections and imports.
  • Binary Modification Toolkits - Adds new sections or imports to a binary to modify its internal composition and structure.
  • Binary Difference Analysis - Detects structural and content changes between two versions of an executable by analyzing headers and sections.
  • Binary Disassembly - Translates binary data into human-readable assembly instructions starting from a specific address or file offset.
  • Binary Diffing - Compares two executable files to identify structural or instructional changes between different program versions.
  • Binary Disassemblers - Translates raw binary data into readable assembly instructions to reverse engineer program functionality.
  • Binary File Layouts - Visualizes section layouts and identifies compression tools to inspect the organization of executable files.
  • Executable File Modifications - Alters structural components of compiled binaries, such as adding new sections or imports.
  • PE Header Editors - Provides capabilities to add or edit sections and import tables directly within the raw byte stream of PE files.
  • Executable Layout Visualizers - Maps the linear structure of an executable into a visual layout to represent memory sections and offsets.
  • Static Analysis Frameworks - Provides a suite of tools for identifying malicious patterns and reversing logic through signature matching.
  • Disassembly Offset Calculators - Translates raw binary bytes into assembly instructions by calculating target addresses from specific file offsets.
  • Malware Analysis - Inspects file layouts and identifies compression tools via signature matching for static malware analysis.
  • File Content Signature Matching - Identifies compression tools and file types by matching byte sequences within the binary against known signatures.

Star history

Star history chart for hasherezade/pe-bearStar history chart for hasherezade/pe-bear

How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI

Projects sharing features with Pe Bear

These projects share indexed features with Pe Bear. Shared tags can include platform or build tooling; verify the primary use case before treating a result as a replacement.
  • cea-sec/miasmcea-sec avatar

    cea-sec/miasm

    3,890View on GitHub↗

    Miasm is a Python reverse engineering framework designed for binary analysis, disassembly, and modification. It functions as a binary analysis framework that lifts machine code into an intermediate representation to enable platform-independent security research. The system operates as a binary emulation engine and modification toolkit, allowing for the execution of binary code in a virtual environment to track state changes without native hardware. It provides tools for binary patching to update and modify raw binary files across multiple CPU architectures and executable formats. The framewo

    Pythonassemblerdisassembleremulator
    View on GitHub↗3,890
  • radare/radare2radare avatar

    radare/radare2

    24,129View on GitHub↗

    radare2 is a reverse engineering framework and binary analysis toolset. It functions as a multi-architecture disassembler, low-level binary debugger, and hexadecimal editor for inspecting executable structures and interpreting machine code when original source files are unavailable. The framework provides capabilities for decompiling machine instructions, performing symbolic analysis, and diffing binary files to identify structural changes across versions. It also includes a digital forensic analyzer and disk analyzer for browsing filesystem formats in userland. The toolset supports binary p

    C
    View on GitHub↗24,129
  • hyperdbg/hyperdbgHyperDbg avatar

    HyperDbg/HyperDbg

    3,885View on GitHub↗

    HyperDbg is a hardware-assisted kernel-mode debugging platform that leverages virtualization to monitor and control system execution. By utilizing hypervisor-level primitives, it enables deep system analysis and instrumentation without relying on standard operating system debugging interfaces. The framework provides a comprehensive environment for inspecting both kernel and user-mode processes, allowing for granular control over execution flow and system state. The project distinguishes itself through a transparent debugging layer designed to remain invisible to the target environment. It emp

    Cbinary-analysisdebugdebugger
    View on GitHub↗3,885
  • joxeankoret/diaphorajoxeankoret avatar

    joxeankoret/diaphora

    4,301View on GitHub↗

    Diaphora is a binary diffing tool and similarity engine designed to compare compiled binaries and identify changed or matching code sections. It functions as a reverse engineering plugin that maps relationships between functions and detects compilation units using assembler analysis and graph theory. The project specializes in vulnerability patch analysis, allowing users to detect security fixes by comparing different versions of a binary. It synchronizes analysis metadata, such as symbol names and comments, between binaries and generates patches by comparing decompiled pseudo-code. The engi

    Python
    View on GitHub↗4,301
Compare all 30 related projects→

Frequently asked questions

What does hasherezade/pe-bear do?

PE-bear is a graphical portable executable analysis tool designed for inspecting, disassembling, and modifying the structure of Windows PE binary files. It functions as a static analysis framework used to identify malicious patterns and reverse engineer program logic.

What are the main features of hasherezade/pe-bear?

The main features of hasherezade/pe-bear are: Portable Executable Analyzers, PE Section Editors, Binary Modification Toolkits, Binary Difference Analysis, Binary Disassembly, Binary Diffing, Binary Disassemblers, Binary File Layouts.

Which projects share features with hasherezade/pe-bear?

Projects with overlapping indexed features include: cea-sec/miasm — Miasm is a Python reverse engineering framework designed for binary analysis, disassembly, and modification. It… radare/radare2 — radare2 is a reverse engineering framework and binary analysis toolset. It functions as a multi-architecture… hyperdbg/hyperdbg — HyperDbg is a hardware-assisted kernel-mode debugging platform that leverages virtualization to monitor and control… joxeankoret/diaphora — Diaphora is a binary diffing tool and similarity engine designed to compare compiled binaries and identify changed or… alibaba/andfix — AndFix is a binary patching framework and update system for Android applications. It provides tools for generating… google/bloaty — Bloaty is a binary size profiler and executable format analyzer that attributes every byte of a binary to specific…