A curated list of awesome resources for executable packing, unpacking, and detection, covering packers, tools, and literature.
Awesome Executable Packing is a curated GitHub repository listing resources related to executable packing—the process of modifying executables through compression, encryption, or obfuscation without changing their core functionality. It aggregates references to academic papers, tools, packers, and datasets to aid in the detection and analysis of packed software, particularly malware.
Malware analysts, cybersecurity researchers, reverse engineers, and digital forensics professionals who need to identify, unpack, or study packed executables as part of their security work.
It provides a centralized, vetted collection of resources that would otherwise be scattered across the internet, saving researchers time and offering a structured entry point into the complex domain of executable packing and unpacking techniques.
A curated list of awesome resources related to executable packing
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Curates hundreds of academic papers, documentation, and research from sources like Black Hat conferences and journals, providing a one-stop reference for packing studies as evidenced by the extensive ':books: Literature' section.
Organizes packers into categories before 2000, between 2000-2010, and after 2010, helping researchers trace the evolution of packing techniques in the ':package: Packers' section.
Includes resources for PE, ELF, Mach-O, and other formats, ensuring relevance across Windows, Linux, and macOS systems, as highlighted in the project description and contents.
Lists practical tools like detection software and unpacking utilities, plus datasets such as EMBER for machine learning model training, found in the ':wrench: Tools' and ':bookmark_tabs: Datasets' sections.
The repository primarily points to external websites and papers, which can suffer from link rot and lack version control, requiring manual verification and maintenance not guaranteed by the project.
Does not include executable code or integrated tools, forcing users to separately download and configure software from various sources, as it's solely a curated list without active development.
While extensive, the list lacks explanatory content or tutorials, making it difficult for novices to apply the resources without prior knowledge, as seen in the dense, reference-only format.