Reflective PE packer.

A ⚡ lightweight Go package to parse, analyze and extract metadata from Portable Executable (PE) binaries. Designed for malware analysis tasks and robust against PE malformations.

An interesting executable file parsing library written by Golang

PE file mapping and manipulation package.

Golang CTF framework and exploit development module

Static analysis tool that can identify potential ransomware on PE or ELF files based on heuristics

🔬【FileICOn】从文件提取图标（支持图片[bmp/gif/jpg/jpeg/jp2/jpeg2000/png/tiff]、图标[ico/icns]、Windows可执行文件[exe/dll]、资源文件[mui/mun]、Linux可执行文件[*.desktop{*.AppImage/*.run}]、手机应用安装包[apk/ipa]、Windows文件夹图标[autorun.inf/desktop.ini]、MacOSX程序[*.app]）Extract icon from file or directory.

Process ghosting using Golang

A static analysis tool built with Go and TermUI

A library and tool in golang to read cert from PE file.

Go library for Windows' Large Address Aware detection and assignment.

This tool downloads an executable and bypasses hash-based virus checks