PESecurity

Binary analyzer

A PowerShell module to analyze Windows binary files for various security features and compilation settings.

PowerShell module to check if a Windows binary (EXE/DLL) has been compiled with ASLR, DEP, SafeSEH, StrongNaming, and Authenticode.

GitHub

626 stars
82 watching
148 forks
Language: PowerShell
last commit: 5 months ago
Linked from 1 awesome list


Backlinks from these awesome lists:

Related projects:

Repository Description Stars
microsoft/binskim An analysis tool for validating binary executables and providing security results 784
nsacyber/bam A tool that gathers and analyzes information about Windows updates, binaries, and symbols to aid in their analysis. 156
powershell/psscriptanalyzer A tool that checks and analyzes PowerShell code for quality and best practices 1,874
airbus-seclab/bincat A toolset for analyzing binary code with IDA integration and support for value, taint analysis, type reconstruction, and detection of use-after-free and double-free bugs. 1,706
johnlatwc/pypowershellxray Decodes and analyzes encoded PowerShell scripts to identify potential shellcode and reverse-engineered APIs. 215
netspi/microburst A collection of scripts and functions to assess Microsoft Azure security from various attack vectors 2,068
packing-box/bintropy An analysis tool for estimating the likelihood of binary compression or encryption 43
carbonblack/binee A binary emulation environment that introspects system interactions to analyze malware behavior. 507
dragon-dreamer/binary-valentine An executable file analyzer tool that detects security, configuration, optimization, system, and format issues in Windows executables 18
binaryanalysisplatform/bap A comprehensive toolkit for analyzing and understanding binary programs 2,079
cyb3rmx/qu1cksc0pe An all-in-one malware analysis tool that provides detailed information about suspicious files and executables. 1,348
stellarbear/yarasharp A C# wrapper around the Yara pattern matching library for detecting malware and analyzing binaries 36
sans-blue-team/deepbluecli A PowerShell module for analyzing Windows event logs to detect and respond to potential security threats. 2,203
cmu-sei/pharos Automated analysis of binary programs to detect and recover object-oriented structures and API calls. 1,569
zeropointdynamics/zelos A platform for emulating and analyzing binary behavior at the system call level. 409