Consider using a Ruby PE parser about bisc HOT 5 CLOSED

rupe is based on ruckus, which is a dead project. Recommend rewriting rupe without this dependency. It's a simple library and this wouldn't take a ton of effort. Alternatively, metasm has a PE parser in metasm/exe_format/pe.

from bisc.

There's also an example PE parser using the rstruct library.

from bisc.

This should be a general enhancement to completely remove any dependency on Metasploit. MSF is only used for PE parsing and its PE regex scanner. It'd be cleaner to use some smaller pure ruby library/class that we can include with BISC.

from bisc.

We are a little better off using librex, although it's still sort-of-maintained code from MSF.

from bisc.

librex, even being loosely maintained, should be totally sufficient.

from bisc.