Labyrinth
26-03-08, 12:58
Created by Daniel Pistelli, a freeware suite of tools including a PE editor called CFF Explorer and a process viewer. The PE editor has full support for PE32/64. Special fields description and modification (.NET supported), utilities, rebuilder, hex editor, import adder, signature scanner, signature manager, extension support, scripting, disassembler, dependency walker etc. First PE editor with support for .NET internal structures. Resource Editor (Windows Vista icons supported) capable of handling .NET manifest resources. The suite is available for x86, x64 and Itanium.
- Explorer Suite (Multi-Platform Version, Recommended) (Only the registered members can see the link)
- Explorer Suite (x86 Version) (Only the registered members can see the link)
- CFF Explorer (x86 Version, stand-alone, Zip Archive) (Only the registered members can see the link)
- CFF Explorer Extensions Repository (Only the registered members can see the link)
The CFF Explorer was designed to make PE editing as easy as possible, but without losing sight on the portable executable's internal structure. This application includes a series of tools which might help not only reverse engineers but also programmers. It offers a multi-file environment and a switchable interface
Only the registered members can see the link
Also, it's the first PE editor with full support for the .NET file format. With this tool you can easily edit metadata's fields and flags. If you're programming something that has to do with .NET metadata, you will need this tool. The resource viewer supports .NET image formats like icons, bitmaps, pngs. You'll be able to analyze .NET files without having to install the .NET framework, this tool has its own functions to access the .NET format
Only the registered members can see the link
Useful links:
- How to write a CFF Explorer Extension (Only the registered members can see the link)
- CFF Explorer Scripting Language Documentation (v1) (Only the registered members can see the link)
- CFF Explorer Extensions Repository (Only the registered members can see the link)
Download (Only the registered members can see the link)
- Explorer Suite (Multi-Platform Version, Recommended) (Only the registered members can see the link)
- Explorer Suite (x86 Version) (Only the registered members can see the link)
- CFF Explorer (x86 Version, stand-alone, Zip Archive) (Only the registered members can see the link)
- CFF Explorer Extensions Repository (Only the registered members can see the link)
The CFF Explorer was designed to make PE editing as easy as possible, but without losing sight on the portable executable's internal structure. This application includes a series of tools which might help not only reverse engineers but also programmers. It offers a multi-file environment and a switchable interface
Only the registered members can see the link
Also, it's the first PE editor with full support for the .NET file format. With this tool you can easily edit metadata's fields and flags. If you're programming something that has to do with .NET metadata, you will need this tool. The resource viewer supports .NET image formats like icons, bitmaps, pngs. You'll be able to analyze .NET files without having to install the .NET framework, this tool has its own functions to access the .NET format
Only the registered members can see the link
Useful links:
- How to write a CFF Explorer Extension (Only the registered members can see the link)
- CFF Explorer Scripting Language Documentation (v1) (Only the registered members can see the link)
- CFF Explorer Extensions Repository (Only the registered members can see the link)
Download (Only the registered members can see the link)