A Windows toolkit for analyzing, editing, and manipulating Portable Executable (PE) files and processes.
PE Tools is a Windows-based toolkit for manipulating Portable Executable (PE) files and processes. It provides utilities to edit PE headers, dump and rebuild executables, compare files, and analyze running processes, primarily used in reverse engineering and security research.
Security researchers, malware analysts, and low-level Windows developers who need to inspect or modify PE file structures and processes.
It offers a comprehensive, integrated suite of PE manipulation tools with a long-standing reputation in the reverse engineering community, inspired by tools like LordPE.
PE Tools - Portable executable (PE) manipulation toolkit
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Allows direct editing of PE and DOS headers, sections, and key directories like imports, exports, and TLS, providing granular low-level control for reverse engineering.
Combines editor, dumper, rebuilder, comparator, and sniffer in one application, streamlining workflows without switching between multiple tools.
Recent version 1.9 added features like entropy analysis, 64-bit disassembler, and high-DPI support, showing ongoing maintenance and relevance.
Supports Windows from XP to 10, and runs on macOS via Wine or ReactOS natively, extending usability beyond traditional Windows setups.
Cannot handle PE files over 4 GB due to lack of large file support, limiting analysis of contemporary large binaries like games or complex software.
Source code is not publicly available, preventing community contributions, security audits, and customization, which is a drawback for transparency-focused users.
Lacks ARM disassembler support and has a pending Win64 version, making it less suitable for modern platforms like Windows on ARM or 64-bit-exclusive environments.
PETools is an open-source alternative to the following products: