pe-reconstruct

Name: pe-reconstruct
Rating: 5 (9 reviews)
Author: diabloidyobane

Recover and statically analyze manually-mapped DLLs (in-process implants, malware loaders, packers, anti-cheat modules) whose PE headers are wiped at runtime. Use when the user asks to dump a hidden DLL from a process, find a manually-mapped module, recover a headerless PE, reconstruct a wiped image, identify hooks installed by an in-process implant, or analyze a code region whose `MZ`/`PE\0\0` he

9stars

Updated last month

View on GitHub ↗License: MIT

How to add

/plugin marketplace add diabloidyobane/PEReconstruct

The exact command may vary by repository. Check the README on GitHub.

For the skill author

Drop this on your repo README

Shows your skill is listed on Skillteca, generates a backlink and trackable traffic.

[![Listada na Skillteca](https://www.skillteca.com.br/api/badge/pe-reconstruct/svg)](https://www.skillteca.com.br/skills/pe-reconstruct?utm_source=badge&utm_medium=readme&utm_campaign=badge)

#python

Related skills

See all in Desenvolvimento →

claude-api

143.8k

Build, debug, and optimize Claude API / Anthropic SDK apps. Apps built with this skill should include prompt caching. Also handles migrating existing Claude API code between Claude model versions (4.5 → 4.6, 4.6 → 4.7, retired-model replacements). TRIGGER when: code imports `anthropic`/`@anthropic-ai/sdk`; user asks for the Claude API, Anthropic SDK, or Managed Agents; user adds/modifies/tunes a C

Desenvolvimento#ai#apiby anthropics

skill-creator

143.8k

Create new skills, modify and improve existing ones, and measure their performance. Use this skill for developing, editing, optimizing, testing, and benchmarking skills, as well as refining their descriptions for better triggering.

Desenvolvimento#testby anthropics

oh-my-issues

79.7k

This skill clusters GitHub issue backlogs by root cause into plan-master issues, redirects related children, and bundles architectural-fix PRs to close clusters atomically. It's ideal for triaging and consolidating numerous issues sharing underlying defects, or for building a plan series or roadmap.

Desenvolvimento#github#gitby thedotmack

claude-mem

79.7k

Captures agent actions across sessions, compresses them with AI, and injects relevant context into future interactions. Compatible with Claude Code, OpenClaw, Codex, Gemini, Hermes, Copilot, OpenCode, and more.

Desenvolvimento#aiby thedotmack

Category alert

Get new Desenvolvimento skills every Monday

One short email with only the new Desenvolvimento skills. 4 minutes of reading, no spam, unsubscribe with one click.

You confirm your email on the first send. No spam. Unsubscribe with one click.

PEReconstruct skill

This skill drives the PEReconstruct toolkit — a pure-stdlib Python pipeline for finding manually-mapped DLLs in a running process and rebuilding a loadable PE so IDA can analyze the dump.

Pipeline (read this before running anything)

PID  →  scan_exec_private.py        (find candidate RX private regions)
     →  scan_pe_deep.py             (optional: PE-sig sweep for headerless)
     →  pick the best candidate     (size 1-10 MB, entropy ~6-7)
     →  rebuild_header

[Description truncada. Veja o README completo no GitHub.]

ShareX LinkedIn

Comments · No comments

No comments yet. Be the first.