Paquet : readpe (0.84-1 et autres)

[ Paquet source : readpe  ]

command-line tools to manipulate Windows PE files

readpe is a toolkit designed to analyze Microsoft Windows PE (Portable Executable) binary files. Its tools can parse and compare PE32/PE32+ executable files (EXE, DLL, OCX, etc), and analyze them in search of suspicious characteristics.

It can be used to get information from those executable files, such as headers, sections, resources and more. It also provides tools to disassemble PE files and determine their security mitigations. It is useful for application security research, digital forensics and incident response, and malware analysis.

It is similar to elftools, only designed for PE files. It has more features than other more specific PE tools, such as icoextract or ntldd.

This package provides the ofs2rva, pedis, pehash, peldd, pepack, peres, pescan, pesec, pestr, readpe and rva2ofs commands.

Autres paquets associés à readpe

• dep: libc6 (>= 2.38)

  bibliothèque C GNU : bibliothèques partagées
  un paquet virtuel est également fourni par libc6-udeb

• dep: libpe1t64 (>= 0.84)

  library to read Windows PE files

• dep: libssl3t64 (>= 3.0.0)

  trousse à outils SSL - bibliothèques partagées

Télécharger readpe

Télécharger pour toutes les architectures proposées

Architecture	Version	Taille du paquet	Espace occupé une fois installé	Fichiers
i386	0.84-1+b1	145,0 ko	1 158,0 ko	[liste des fichiers]