9 open-source projects similar to trailofbits/pe-parse, ranked by how many features they have in common. Compare stars, activity and what each one does to find the best Pe Parse alternative.
Elastic Malware Benchmark for Empowering Researchers
pefile is a Python module to read and work with PE (Portable Executable) files
SafetyKatz is a combination of slightly modified version of @gentilkiwi's Mimikatz project and @subtee's .NET PE Loader.
A library to load, manipulate, dump PE files. See also: https://github.com/hasherezade/libpeconv_tpl
Java library to analyse Portable Executable files with a special focus on malware analysis and PE malformation robustness
Donut is a toolset for loading and executing payloads in memory, featuring a position-independent shellcode generator, an in-memory payload injector, and a .NET assembly loader. It is designed to convert executable files and scripts into shellcode that can be executed within the memory space of a remote process without writing files to disk. The project specializes in security evasion through memory-based patching and payload obfuscation using symmetric block ciphers and compression. It includes a remote payload stager to retrieve encrypted modules from HTTP or DNS servers during runtime, red