pev - a PE analysis toolkit
Descriptionpev is a multiplatform PE analysis toolkit that includes tools to retrieve and parsing information about Windows PE files.
Features
Based in own library libpe
Support for PE32+ (64-bit) files
Formatted output in text and CSV (other formats in development)
pesec: detect presence of ASLR and DEP/NX bits
readpe: show PE headers, sections and imports
pescan: detect TLS callback functions, DOS stub modification, suspicious sections and more
pedis: disassembly a PE file section or function with support for Intel and AT&T syntax
Include tools to convert RVA from file offset and vice-versa
http://sourceforge.net/projects/pev/ 沙发,呵呵····
页:
[1]