A library for creating, reading and editing PE files and .NET modules.

Portable Executable parsing library (from PE-bear)

Portable Executable (PE) library written in .Net

Windows tool for dumping malware PE files from memory back to disk for analysis.

PE-bear (builds only)

Portable Executable Explorer

LIEF - Library to Instrument Executable Formats (C++, Python, Rust)

A library to load, manipulate, dump PE files. See also: https://github.com/hasherezade/libpeconv_tpl

Portable Executable Explorer version 2

Python module for viewing Portable Executable (PE) files in a tree-view using pefile and PyQt5. Can also be used with IDA Pro and Rekall to dump in-memory PE files and reconstruct imports.

A bunch of parsers for PE and PDB formats in C++

Yet another PE Viewer

Portable Executable reversing tool with a friendly GUI

PE Viewer

PowerShell PE Parser

Dump .NET metadata information into CSV files

Simple command line assembly reference checker

Reads and writes .NET assemblies and modules

A binary static analysis tool that provides security and correctness results for Windows Portable Executable and *nix ELF binary formats

A rewrite of the old legacy software "depends.exe" in C# for Windows devs to troubleshoot dll load dependencies issues.

Reimplementation of ECMA-335 metadata APIs

Cecil is a library to inspect, modify and create .NET programs and libraries.

A tool that finds differences between .NET assemblies

LibObjectFile is a .NET library to read, manipulate and write linker and executable object files (e.g ELF, PE, DWARF, ar...)

Reko is a binary decompiler.

Obfuscator for .NET and Mono, with a customizable engine for building your own obfuscators.

Sample code to show how to walk the managed heap in C#

SizeBench is a binary size investigation tool for Windows

Roslyn analyzers on .NET binaries

Portable Executable parsing library, used by PEExplorer. Also available as a nuget package