From 04c04a1fae0b397d2c7b8c106d17e65161f52292 Mon Sep 17 00:00:00 2001 From: pe3zx Date: Tue, 21 Aug 2018 21:44:10 +0700 Subject: [PATCH] Tools: Binary Analysis: Microsoft/binskim --- README.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/README.md b/README.md index ac5c787..bcf902c 100644 --- a/README.md +++ b/README.md @@ -1023,6 +1023,10 @@ _return-to-libc techniques_ LIEF Library to Instrument Executable Formats + + Microsoft/binskim + A binary static analysis tool that provides security and correctness results for Windows portable executables + pierrezurek/Signsrch tool for searching signatures inside files, extremely useful in reversing engineering for figuring or having an initial idea of what encryption/compression algorithm is used for a proprietary protocol or file. it can recognize tons of compression, multimedia and encryption algorithms and many other things like known strings and anti-debugging code which can be also manually added since it's all based on a text signature file read at runtime and easy to modify.