From Collaborative RCE Tool Library

Jump to: navigation, search

Export Editors


Tool name: Export Function Explorer
Rating: 0.0 (0 votes)
Author: tt.t                        
Website: N/A
Current version: 1.2
Last updated:
Direct D/L link: Locally archived copy
License type: Free
Description: Export Function Explorer (for PE32 only) allows you to easily add new exports to existing PE files, or output the export table to a .txt list which is easy to parse from a custom application. This is the original version of ExpX, which only supports PE32 (no X64) PE files.
Also listed in: (Not listed in any other category)
More details: Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry)



Tool name: Export Function Explorer x64
Rating: 0.0 (0 votes)
Author: tt.t, modified by Fyyre                        
Website: http://mfyyre.narod.ru
Current version: 1.2
Last updated: June 27, 2008
Direct D/L link: Locally archived copy
License type: Free
Description: I needed to add an export to a PE32+ file, and could not locate a tool which would do this.

This is a modification of Export Function Explorer, which lets you add new exports to PE32+ files. Please note that this modification is only suited for PE32+ files, use the normal ExpX for anything else.
Also listed in: (Not listed in any other category)
More details: Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry)



Tool name: PPEE (puppy)
Rating: 0.0 (0 votes)
Author: Zaderostam                        
Website: https://www.mzrst.com/
Current version: 1.09
Last updated: October 10, 2017
Direct D/L link: https://www.mzrst.com/puppy/PPEE(puppy)%201.10.zip
License type: Free
Description: This is a professional PE file explorer that lets you dig into all data directories available in the PE/PE64 file and edit them.
Export, Import, Resource, Exception, Certificate(Relies on Windows API), Base Relocation, Debug, TLS, Load Config, Bound Import, IAT, Delay Import and CLR are supported.
Two companion plugins are also provided. FileInfo, to query the file in the well-known malware repositories and take one-click technical information about the file such as its size, entropy, attributes, hashes, version info and so on. YaraPlugin, to test Yara rules against opened file.

Puppy is robust against malformed and crafted PE files which makes it handy for reversers, malware researchers and those who want to inspect PE files in more details.

Puppy is free and tries to be small, fast, nimble and friendly as your puppy!

Features:

Both PE32 and PE64 support
Examine YARA rules against opened file
Virustotal and OPSWAT's Metadefender query report
Statically analyze windows native and .Net executables
Robust Parsing of exe, dll, sys, scr, drv, cpl, ocx and more
Edit almost every data structure
Easily dump sections, resources and .Net assembly directories
Entropy and MD5 calculation of the sections and resource items
View strings including URL, Registry, Suspicious, ... embedded in files
Detect common resource types
Extract artifacts remained in PE file
Anomaly detection
Right-click for Copy, Search in web, Whois and dump
Built in hex editor
Explorer context menu integration
Descriptive information for data members
Refresh, Save and Save as menu commands
Drag and drop support
List view columns can sort data in an appropriate way
Open file from command line
Checksum validation
Plugin enabled

Feel free to use it ;)
Also listed in: .NET Executable Editors, Dependency Analyzer Tools, Entropy Analyzers, Exe Analyzers, Executable CRC Calculators, Executable File Editors & Patchers, Hex Editors, Import Editors, Malware Analysis Tools, PE Executable Editors, Relocation Tools, String Finders
More details: Click here for more details, screenshots, related URLs & comments for this tool! (or to update its entry)


RSS feed Feed containing all updates and additions for this category.

RSS feed Feed containing all updates and additions for this category, including sub-categories.





Views
Category Navigation Tree
   Needs New Category  (3)