pe-analysis 开源项目推荐（97 个）

LING71671 /open-reverselab

Open-source reverse engineering lab: 197-article knowledge base + MCP tools + CTF/APK/PE automation toolchain. Agent-native. Note:由于场景原因，目前有让几乎所有（除fable5）AI都会越狱的bug,静等官方修复,但是请在合法授权下进行安全测试😉(等我用上5.6再更新(ー_ー)!!)

anpa1200 /Unpacker

Packer detection and unpacking workflow for malware analysis: UPX, ASPack, Themida, VMProtect, PE and ELF.

Vith0r /StackSentry

Windows memory scanner for call stack spoofing detection, unbacked shellcode, injected DLLs and in-memory C2 implants.

notgate /dnSpy-MCP

支持MCP服务器的.NET装配的无头CLI反射调试器

habanada /NativePe

NativePe: a PE loader/parser library for Delphi 12 (port of libpeconv, Win32 + Win64, open source)

bilal-ctf /Windows-PE-Analyzer

A learning-focused PE analysis engine with modular detectors, heuristic analysis, and HTML reporting.

elementmerc /anya

A malware analysis platform built in Rust

dRafaleD /Malware-analysis-AsphDex

该项目在 GitHub 上没有填写描述

mobinert /HORUS

Single-file Windows malware triage: PE static analysis, case investigation, and opt-in IOC enrichment. No runtime dependencies.

zcyberseclab /vmm

Malware sandbox for automated PE/ELF analysis with EDR integration and behavioral monitoring. Open-source alternative to CAPE sandbox.

ramirak /MaltraceX

Check your system integrity and scan for malicious files and registry keys

waris206 /ThreatLens

AI-Driven Malware Triage & Deep Swarm Inspection Platform

5h4d0wn1k /m4-yara-gen

YARA rule generator - automates signature creation from malware sample clusters.

5h4d0wn1k /m3-deobfuscator

Malware deobfuscator - string, packer and control-flow deobfuscation analysis workflow.

5h4d0wn1k /m8-elf-analyzer

Hand-written ELF32/ELF64 analyzer for Linux binary forensics — headers, sections, relocations, GOT/PLT detection, symbol tables, entropy, architecture detection, and a minimal ELF builder, in pure Python.

D3v4nshPat3l /HexForgeStudio

Local-first hex editor, binary forensics, threat triage, PE analysis, and forensic PDF reporting.

mauricelambert /ProgramExecutableAnalyzer

This script analyzes MZ-PE (MS-DOS) executable file

5h4d0wn1k /m9-shellcode-encoder

Shellcode encoder/obfuscator - evasion transformations and polymorphism experiments.

5h4d0wn1k /m4-adb-exploit

Android ADB security audit toolkit: scans build.prop/AndroidManifest for insecure-debug defaults (adb_unsecured, debuggable build, open TCP), JSON/Markdown reports, read-only emulator-gated ADB harness.

5h4d0wn1k /malforge

Malware analysis & RE workstation - offline ELF/PE/Mach-O parsing, PTRACE sandbox, deobfuscation, YARA-gen, binary diff, shellcode encoding.