DWARF Explorer - a GUI utility for navigating the DWARF debug information

It bridges my research with a functional tool. I want to provide a safe, open-source framework for hackers to test evasion and for defenders to improve detection through hands-on learning.

Python implementation of the Packed Executable iDentifier (PEiD)

Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes

Dataset of packed PE samples

Packing detection tool for PE files

A utility to read a .net PE File

This project is a C++ application designed to search for a specified keyword within the sections of Portable Executable (PE) files located in a given directory.

Implementation of the packing detection heuristic from the paper "Packed PE File Detection for Malware Forensics" of Han et al.

Standard and DLL Manual Mapping

A Python tool for creating adversarial PE files by applying mutations driven by camera-based entropy, with a feedback loop for evasion and steganographic logging.

DLLuminate: Illuminate the inner workings of Windows DLL files. A Python-powered analysis tool built on pefile that reveals exports, imports, and PE structure for developers and security researchers.

Warm greetings to ESET! x86-64 executable creation example