PowerShellArsenal
A PowerShell module for reverse engineering that disassembles code, analyzes malware, parses memory structures, and inspects Windows internals.
What is PowerShellArsenal?
PowerShellArsenal is a comprehensive PowerShell module designed to assist reverse engineers in analyzing software, particularly malware and system internals. It provides a suite of tools for disassembling both managed and unmanaged code, performing memory analysis, parsing file formats, and extracting low-level Windows OS information.
Reverse engineers and security analysts focusing on malware analysis, Windows internals, and binary forensics, especially those working in PowerShell environments.
Developers choose PowerShellArsenal for its extensive, integrated toolset that combines disassembly, memory inspection, and file parsing into a single PowerShell module with v2 compatibility and clean, object-oriented output, avoiding reliance on external command-line utilities.
Overview
A PowerShell Module Dedicated to Reverse Engineering
Use Cases
Best For
- Disassembling native and managed code using the Capstone Engine and IL disassembly tools.
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
