-
-
[转帖]pev - a PE analysis toolkit
-
发表于: 2012-11-6 04:05
-
pev - a PE analysis toolkit
pev-0.60-win32.zip
Description
pev is a multiplatform PE analysis toolkit that includes tools to retrieve and parsing information about Windows PE files.
Features
Based in own library libpe
Support for PE32+ (64-bit) files
Formatted output in text and CSV (other formats in development)
pesec: detect presence of ASLR and DEP/NX bits
readpe: show PE headers, sections and imports
pescan: detect TLS callback functions, DOS stub modification, suspicious sections and more
pedis: disassembly a PE file section or function with support for Intel and AT&T syntax
Include tools to convert RVA from file offset and vice-versa
http://sourceforge.net/projects/pev/
pev-0.60-win32.zip
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
