Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
翻译 - 扫描给定的进程。识别并转储各种潜在的恶意植入物（替换/注入的PE，shellcode，hook，内存中的修补程序）。
C++ 3.25 k
14 天前
A library to load, manipulate, dump PE files. See also: https://github.com/hasherezade/libpeconv_tpl
C++ 1.18 k
7 天前
C++ 803
2 年前
Dynamic unpacker based on PE-sieve
C 707
1 个月前
C++ 44
19 天前
A demo implementation of a well-known technique used by some malware to evade userland hooking, using my library: libpeconv.
C 19
7 年前
A ready-made template for a new project based on libPeConv library
C++ 7
6 年前