RCEpic
hasherezade/pe-sieve
Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
- Owner
- hasherezade (personal account)
- Stars
- Stars: 3,935
- Forks
- Forks: 492
- Language
- C++
- License
- BSD-2-Clause
- Created
- 2017
- Topics
- pe-formathookingpe-dumperpe-analyzerlibpeconvprocess-analyzerscansanti-malwarepe-sievemalware-analysis
- Tier
- RC (2,000 to 4,999 ★) What this tier means
More repos by hasherezade
All 32 repos by hasherezade- hasherezade/pe-bearStars: 3,873C++RC
- hasherezade/pe_to_shellcodeStars: 2,801C++RC
- hasherezade/hollows_hunterStars: 2,429CRC
- hasherezade/malware_training_vol1Stars: 2,105AssemblyRC
- hasherezade/tiny_tracerStars: 1,714C++Beta
- hasherezade/libpeconvStars: 1,396C++Beta
Nearby in C++
All C++ repos- nextcloud/desktopStars: 3,941C++RC
- MisterTea/EternalTerminalStars: 3,940C++RC
- newsboat/newsboatStars: 3,936C++RC
- abumq/easyloggingppStars: 3,933C++RC
- ricochet-im/ricochetStars: 3,920C++RC
- dendibakh/perf-ninjaStars: 3,911C++RC