libpeconv 开源项目推荐（10 个）

hasherezade /pe-sieve

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

hasherezade /libpeconv

A library to load, manipulate, dump PE files. See also: https://github.com/hasherezade/libpeconv_tpl

hasherezade /mal_unpack

Dynamic unpacker based on PE-sieve

hasherezade /dll_to_exe

Converts a DLL into EXE

hasherezade /libpeconv_tpl

A ready-made template for a project based on libpeconv.

hasherezade /loaderine

A demo implementation of a well-known technique used by some malware to evade userland hooking, using my library: libpeconv.

habanada /NativePe

NativePe: a PE loader/parser library for Delphi 12 (port of libpeconv, Win32 + Win64, open source)

hasherezade /libpeconv_wrappers

A ready-made template for a new project based on libPeConv library

hexria /ExeMorph

Design and implement ExeMorph, a next-generation CLI-based security tool that transforms Windows DLL files into fully functional standalone EXE binaries while providing deep insight into PE internals, execution flow, and potential runtime risks.

0netdbg /pe-sieve

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).