SigFlip
PE file modifier
A tool for modifying signed executable files without invalidating the signature or integrity checks.
SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.
1k stars
20 watching
188 forks
Language: C#
last commit: about 1 year ago Related projects:
Repository | Description | Stars |
---|---|---|
liip/liipimaginebundle | An image manipulation toolkit for Symfony-based projects. | 1,663 |
hiddenillusion/analyzepe | Analyzes PE files by combining data from various tools to generate a centralized report. | 204 |
dragon-dreamer/binary-valentine | An executable file analyzer tool that detects security, configuration, optimization, system, and format issues in Windows executables | 16 |
struppigel/portex | A Java library for static analysis of Portable Executable files with focus on malware detection and PE malformation robustness | 496 |
espressocake/dll_imports_bof | An enumeration tool to inspect PE files and extract information about loaded DLLs and their imported functions | 83 |
samlarenn/pepacker | A tool for encrypting and obfuscating .text sections of executable files. | 49 |
egebalci/amber | Creates reflective PE files that can be executed in memory without being written to disk | 1,187 |
silva97/pei | Tools for injecting and manipulating code in PE executables | 30 |
dissectmalware/officeforensictools | A Python-based collection of tools for gathering forensic information from Office documents | 26 |
0ang3el/easycsrf | An extension that automatically modifies certain HTTP requests to reveal potential CSRF vulnerabilities in web applications. | 159 |
slimm609/checksec | A tool to analyze and report on the security properties of executables | 2,026 |
packing-box/pypackerdetect | Detects whether an executable is packed using various methods and signatures. | 21 |
psecio/iniscan | A tool to scan PHP configuration files for security practices and report results | 1,479 |
med0x2e/ntlmrelay2self | A toolset to exploit a Windows vulnerability allowing an attacker to gain elevated privileges on the local system by using NTLM authentication over HTTP. | 394 |
packing-box/peid | A tool for detecting packed executables in Windows files by identifying embedded signatures | 128 |