Popular repositories Loading

1. pe-sieve pe-sieve Public

   Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

   C++ 3.9k 491

2. pe-bear pe-bear Public

   Portable Executable reversing tool with a friendly GUI

   C++ 3.9k 249

3. pe_to_shellcode pe_to_shellcode Public

   Converts PE into a shellcode

   C++ 2.8k 467

4. hollows_hunter hollows_hunter Public

   Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).

   C 2.4k 297

5. malware_training_vol1 malware_training_vol1 Public

   Materials for Windows Malware Analysis training (volume 1)

   Assembly 2.1k 209

6. tiny_tracer tiny_tracer Public

   A Pin Tool for tracing API calls etc

   C++ 1.7k 170