radare2
pev
Our great sponsors
radare2 | pev | |
---|---|---|
1 | 5 | |
15,238 | 514 | |
- | - | |
9.9 | 4.7 | |
over 2 years ago | about 2 years ago | |
C | C | |
GNU Lesser General Public License v3.0 only | GNU General Public License v3.0 or later |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
radare2
-
Awesome CTF : Top Learning Resource Labs
radare2 - A portable reversing framework.
pev
-
Get "File Version" from an exe file stored on Linux
https://github.com/merces/pev/wiki ?
-
pev, a multiplatform PE analysis toolkit is looking for a new maintainer
I had never heard of this and prefer not reading through the code on mobile, so I went to the homepage to get a better idea of what it is. The video introduction was helpful, but it also raised two questions for me.
-
Add pev support?
pev is a mighty PE file analysis toolkit, which allows to analyse and/or extract windows exe files easily.
What are some alternatives?
gef - GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux
dll_to_exe - Converts a DLL into EXE
pwndbg - Exploit Development and Reverse Engineering with GDB Made Easy
peid - Python implementation of the Packed Executable iDentifier (PEiD)
volatility - An advanced memory forensics framework
pwntools - CTF framework and exploit development library
radare2-book - Radare2 official book
mal_unpack - Dynamic unpacker based on PE-sieve
snappy-fox - 🦀🦊 Snappy (Firefox morgue cache format) files de-compressor, works even if they're corrupted
hollows_hunter - Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
navit - The open source (GPL v2) turn-by-turn navigation software for many OS
semblance - Disassembler for Windows executables. Supports 16-bit NE (New Executable), MZ (DOS), and PE (Portable Executable, i.e. Win32) files.