Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
A library to load, manipulate, dump PE files. See also: https://github.com/hasherezade/libpeconv_tpl
Dynamic unpacker based on PE-sieve
A demo implementation of a well-known technique used by some malware to evade userland hooking, using my library: libpeconv.
A ready-made template for a new project based on libPeConv library
Design and implement ExeMorph, a next-generation CLI-based security tool that transforms Windows DLL files into fully functional standalone EXE binaries while providing deep insight into PE internals, execution flow, and potential runtime risks.
Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
To associate your repository with the libpeconv topic, visit your repo's landing page and select "manage topics."