issues
search
saferwall
/
pe
A :zap: lightweight Go package to parse, analyze and extract metadata from Portable Executable (PE) binaries. Designed for malware analysis tasks and robust against PE malformations.
https://saferwall.com
MIT License
321
stars
46
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
Numerous CLR data directory parsing errors
#106
rabbitstack
opened
22 hours ago
1
Added ParseVersionResourcesForEntries to support files with multiple product versions.
#105
getvictor
closed
1 week ago
3
feat: loadSystemRoots use ExitCode to test cmd success
#104
LordNoteworthy
opened
3 weeks ago
0
update README
#103
LordNoteworthy
closed
3 weeks ago
0
Documentation uses method pe.PrettyMachineType that doesn't exist
#102
edeca
closed
3 weeks ago
1
Correct capitalisation of example code
#101
edeca
closed
1 month ago
0
about function loadSystemRoots
#100
lysShub
opened
1 month ago
12
How to write to file?
#98
MosheMendel18
closed
4 months ago
3
fix: use file.opt instead of opt when setting logger creating a file instance.
#97
Snshadow
closed
5 months ago
1
fix: use Valuelength for parseString instead of whole String size
#96
Snshadow
closed
4 months ago
3
feature: parse all certificates from multi-signed files
#95
secDre4mer
closed
6 months ago
2
fix(security): hide console window only in Windows
#94
LordNoteworthy
closed
9 months ago
1
Do not spawn visibile consoles, hide certutil window
#93
StefanoBalzarottiNozomi
closed
9 months ago
5
feat(dumper): walk dir in async mode + print rsrc version info
#92
LordNoteworthy
closed
9 months ago
0
fix: AuthentiHash() out of bound access check
#91
LordNoteworthy
closed
9 months ago
1
feat: annotate structs missing json tags
#90
LordNoteworthy
closed
9 months ago
1
fix: do not print to stdout unhandled metadata table
#89
LordNoteworthy
closed
11 months ago
1
Returning multiple certificate chains in a PE file
#88
acharyab15
opened
1 year ago
3
Printing to stdout instead of returning an error or logging
#87
wagoodman
closed
11 months ago
4
feat: parse a large number of .NET metadata headers
#86
veramine
closed
1 year ago
2
dotnet: don't skip the GenericParamConstraint metadata table
#85
veramine
closed
1 year ago
3
feat: verify authenticode hash from signature
#84
secDre4mer
closed
1 year ago
1
Hello, may I ask if the driver's signature is inaccurate now?
#83
maxbad
closed
1 year ago
2
How to get the certificate signature time of the pe file
#82
xdeng
opened
1 year ago
4
fix: correct broken reflection compare
#81
secDre4mer
closed
1 year ago
2
after running the pods internal error 500
#80
kaeptenbalu
closed
1 year ago
0
Fix offset issue when reading StringFileInfo
#79
dmjb
closed
1 year ago
4
feat: version resource parsing
#78
rabbitstack
closed
1 year ago
0
feat: support parsing version-information resource
#77
LordNoteworthy
closed
7 months ago
1
feat: allow custom hash algo selection for authentihash calculation
#76
hansinator
closed
1 year ago
0
feat: parse dotnet metadata tables
#75
LordNoteworthy
opened
1 year ago
2
chore: increase unit test coverage to 80%
#74
LordNoteworthy
closed
1 year ago
1
feat: improve PR dumper to print CLR directory
#73
LordNoteworthy
closed
1 year ago
1
feat[config]: Permit more granular control over which data directories are parsed
#72
rabbitstack
closed
1 year ago
2
feat: Maintain the state of which data directory has been parsed
#71
LordNoteworthy
opened
1 year ago
0
feat: load config directory unit test and make dumper display load config
#70
LordNoteworthy
closed
1 year ago
1
feat: Unit test TLS directory and PE dumper --tls option
#69
LordNoteworthy
closed
1 year ago
1
feat (debug directory): unit test more debug type, PE dumper option to display debugs
#68
LordNoteworthy
closed
1 year ago
1
Annotate bound import data structures with go JSON tags
#67
LordNoteworthy
closed
1 year ago
1
chore: Unit test resource directory, JSON tags and PE dumper
#66
LordNoteworthy
closed
1 year ago
1
feat: Annotate Exceptions and security data dir structs with JSON tags
#65
LordNoteworthy
closed
1 year ago
0
feat: JSON tags to PE header structures
#64
LordNoteworthy
closed
1 year ago
1
pe dumper print imports and unit test parsing import data directory
#63
LordNoteworthy
closed
1 year ago
1
PE dumper to print section headers
#62
LordNoteworthy
closed
1 year ago
1
feat: PE Dumper to print PE headers
#61
LordNoteworthy
closed
1 year ago
0
feat: add serialNumber, signatureAlgorithm and pubKeyAlgorithm the ce…
#60
LordNoteworthy
closed
1 year ago
1
feat: Add option to disable cert validation
#59
LordNoteworthy
closed
1 year ago
1
feat: cmd(pedumper) support to print exceptions
#57
LordNoteworthy
closed
1 year ago
1
Chore: Remove cobra dependency from cmd/pedumper
#56
LordNoteworthy
closed
1 year ago
1
Feat: extend cmd to display all parsed PE data
#55
LordNoteworthy
opened
1 year ago
0
Next