pe_to_shellcode
dll_to_exe
pe_to_shellcode | dll_to_exe | |
---|---|---|
4 | 3 | |
2,205 | 773 | |
- | - | |
3.8 | 1.8 | |
9 months ago | 10 months ago | |
C++ | C++ | |
BSD 2-clause "Simplified" License | - |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
pe_to_shellcode
-
Bypassing Windows Defender (10 Ways)
Finally, we also have the option to transform a native PE back to shellcode. This may be done, for example, via hasherezade's pe_to_shellcode tool.
- Petoshellcode - Converts PE into a shellcode
- pe_to_shellcode: Converts PE so that it can be then injected just like a normal shellcode. (At the same time, the output file remains to be a valid PE). Supports both 32 and 64 bit PEs
- Petoshellcode – Converts PE into a Shellcode
dll_to_exe
-
Converted Photo Viewer dll to exe, crashes when opening
So I thought I would see if I could convert the dll into an exe so I could have Faststone open PhotoViewer directly. Found a Github project that allowed me to do just that, but in the end it just crashes when I try to open it. Where do I go from here?
-
DLL to exe
U can use the PEConv library like this open-source tool https://github.com/hasherezade/dll_to_exe
What are some alternatives?
DripLoader - Evasive shellcode loader for bypassing event-based injection detection (PoC)
pe-sieve - Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
pypackerdetect - Packing detection tool for PE files
mal_unpack - Dynamic unpacker based on PE-sieve
donut - Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters
cpp-docs - C++ Documentation
pwntools - CTF framework and exploit development library
pev - The PE file analysis toolkit
Alcatraz - x64 binary obfuscator
pe-bear - Portable Executable reversing tool with a friendly GUI
LsaParser - A shitty (and old) lsass parser.
ropfuscator - ROPfuscator is a fine-grained code obfuscation framework for C/C++ programs using ROP (return-oriented programming).