SigFlip

PE file modifier

A tool for modifying signed executable files without invalidating the signature or integrity checks.

SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature.

GitHub

1k stars
20 watching
188 forks
Language: C#
last commit: about 1 year ago

Related projects:

Repository Description Stars
liip/liipimaginebundle An image manipulation toolkit for Symfony-based projects. 1,663
hiddenillusion/analyzepe Analyzes PE files by combining data from various tools to generate a centralized report. 204
dragon-dreamer/binary-valentine An executable file analyzer tool that detects security, configuration, optimization, system, and format issues in Windows executables 16
struppigel/portex A Java library for static analysis of Portable Executable files with focus on malware detection and PE malformation robustness 496
espressocake/dll_imports_bof An enumeration tool to inspect PE files and extract information about loaded DLLs and their imported functions 83
samlarenn/pepacker A tool for encrypting and obfuscating .text sections of executable files. 49
egebalci/amber Creates reflective PE files that can be executed in memory without being written to disk 1,187
silva97/pei Tools for injecting and manipulating code in PE executables 30
dissectmalware/officeforensictools A Python-based collection of tools for gathering forensic information from Office documents 26
0ang3el/easycsrf An extension that automatically modifies certain HTTP requests to reveal potential CSRF vulnerabilities in web applications. 159
slimm609/checksec A tool to analyze and report on the security properties of executables 2,026
packing-box/pypackerdetect Detects whether an executable is packed using various methods and signatures. 21
psecio/iniscan A tool to scan PHP configuration files for security practices and report results 1,479
med0x2e/ntlmrelay2self A toolset to exploit a Windows vulnerability allowing an attacker to gain elevated privileges on the local system by using NTLM authentication over HTTP. 394
packing-box/peid A tool for detecting packed executables in Windows files by identifying embedded signatures 128