pypackerdetect
pe_to_shellcode
Our great sponsors
| pypackerdetect | pe_to_shellcode | |
|---|---|---|
| 1 | 4 | |
| 19 | 2,202 | |
| - | - | |
| 4.2 | 3.8 | |
| 3 months ago | 9 months ago | |
| Python | C++ | |
| GNU General Public License v3.0 only | BSD 2-clause "Simplified" License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
pypackerdetect
-
Collection of tools for executable packing detection
PyPackerDetect (upgraded fork): Refactored version of the original that seems to be discontinued.
pe_to_shellcode
-
Bypassing Windows Defender (10 Ways)
Finally, we also have the option to transform a native PE back to shellcode. This may be done, for example, via hasherezade's pe_to_shellcode tool.
- Petoshellcode - Converts PE into a shellcode
- pe_to_shellcode: Converts PE so that it can be then injected just like a normal shellcode. (At the same time, the output file remains to be a valid PE). Supports both 32 and 64 bit PEs
- Petoshellcode – Converts PE into a Shellcode
What are some alternatives?
bintropy - Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes
DripLoader - Evasive shellcode loader for bypassing event-based injection detection (PoC)
LIEF - LIEF - Library to Instrument Executable Formats
dll_to_exe - Converts a DLL into EXE
PyPackerDetect - A malware dataset curation tool which helps identify packed samples.
donut - Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters
pwntools - CTF framework and exploit development library
Alcatraz - x64 binary obfuscator
LsaParser - A shitty (and old) lsass parser.
ropfuscator - ROPfuscator is a fine-grained code obfuscation framework for C/C++ programs using ROP (return-oriented programming).
metame - metame is a metamorphic code engine for arbitrary executables
nishang - Nishang - Offensive PowerShell for red team, penetration testing and offensive security.