Locked pev-0.60 - a PE analysis toolkit

[sQuo]

This is the hidden content, please

• Sign In
• or
• Sign Up

 

 

 

 

This is the hidden content, please

• Sign In
• or
• Sign Up

This is the hidden content, please

• Sign In
• or
• Sign Up

 

Description

pev is a multiplatform PE analysis toolkit that includes tools to retrieve and parsing information about Windows PE files.

 

Features

Based in own library libpe

Support for PE32+ (64-bit) files

Formatted output in text and CSV (other formats in development)

pesec: detect presence of ASLR and DEP/NX bits

readpe: show PE headers, sections and imports

pescan: detect TLS callback functions, DOS stub modification, suspicious sections and more

pedis: disassembly a PE file section or function with support for Intel and AT&T syntax

Include tools to convert RVA from file offset and vice-versa

 

This is the hidden content, please

• Sign In
• or
• Sign Up