It bridges my research with a functional tool. I want to provide a safe, open-source framework for hackers to test evasion and for defenders to improve detection through hands-on learning.
DWARF Explorer - a GUI utility for navigating the DWARF debug information
Python implementation of the Packed Executable iDentifier (PEiD)
Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes
Dataset of packed PE samples
Packing detection tool for PE files
Lightweight Windows disassembler, PE inspection and patch-assistance tool for native EXE/DLL files.
Standard and DLL Manual Mapping
A CLI tool that compares two Windows PE files byte-by-byte and presents the diff in an interactive terminal UI. Each changed region is shown with its RVA, VA, file offset, raw bytes, and section name.
Implementation of the packing detection heuristic from the paper "Packed PE File Detection for Malware Forensics" of Han et al.
This project is a C++ application designed to search for a specified keyword within the sections of Portable Executable (PE) files located in a given directory.
A Python tool for creating adversarial PE files by applying mutations driven by camera-based entropy, with a feedback loop for evasion and steganographic logging.
Cross-platform, zero-dependency Go tool for inspecting and editing Windows PE file resources
Machine Learning framework for static and dynamic analysis of Windows PE files to detect malicious activity
Machine learning-based malware classification using static PE features, LightGBM, SHAP and the EMBER 2024 dataset.
Warm greetings to ESET! x86-64 executable creation example
Add a description, image, and links to the pe-files topic page so that developers can more easily learn about it.
To associate your repository with the pe-files topic, visit your repo's landing page and select "manage topics."