LIEF - Library to Instrument Executable Formats (C++, Python, Rust)

Run a Exe File (PE Module) in memory (like an Application Loader)

Moneta is a live usermode memory analysis tool for Windows with the capability to detect malware IOCs

Shoggoth: Asmjit Based Polymorphic Encryptor

Portable Executable parsing library (from PE-bear)

DLL Hijacking Detection Tool

Running C++ in anywhere like a script.

COFF and Portable Executable format described using standard C++ with no dependencies.

Persistent IAT hooking application - based on bearparser

A bunch of parsers for PE and PDB formats in C++

Pseudo-malicious usermode memory artifact generator kit designed to easily mimic the footprints left by real malware on an infected Windows OS.

PE32 (x86) and PE32+ (x64) binaries analysis tool, resources viewer/extractor.

A Windows PE format file loader

DLL Injector (LoadLibrary) in C++ (x86 / x64) - LoadLibrary DLL injector

Custom LoadLibrary / GetProcAddress (x86 / x64) - Load DLL and retrieve functions manually

Portable Executable launcher for Windows NT bypassing loader

PE Explorer in C++ (x86 / x64) - PE file parser, retrieve exports and imports

Win32 PE (dll, sys, exe) remote manual mapper written on PHP with injector-client written on C++20

Tool to find code cave in PE image (x86 / x64) - Find empty space to place code in PE files

POC Ring3 Windows Rootkit (x86 / x64) - Hide processes and files