Chapters

• User Guide
• API Reference

External links

• GitHub Repository
• PyPi
• Website

Malstruct

Sticky

Please use GitHub Issues to ask general questions, make feature requests (and vote for them), report issues and bugs, and to submit PRs. Feel free to request any changes that would support your project.

User Guide

• Introduction
  • Example
  • Malware Analysis
  • Development and support
  • Requirements
  • Installing
• Transition to 2.8
  • Overall
• Transition to 2.9
  • Overall
• Transition to 2.10
  • Overall
• The Basics
  • Fields
  • Variable-length fields
  • Structs
  • Sequences
  • Repeaters
  • Processing on-the-fly
• The Basics, part 2
  • Integers and floats
  • Bytes and bits
  • Strings
  • Mappings
  • Processing files
  • Documenting fields
• The Bit/Byte Duality
  • History
  • BitStruct
  • Important notes
  • Fields that work with bits
  • Fields that work with bytes
  • Fields that do both
  • Fields that do not work and fail
• The Context
  • Nesting
  • Refering to inlined constructs
  • Using this expression
  • Using len_` expression
  • Using obj_ expression
  • Using list_ expression
  • Known deficiencies
• Miscellaneous
  • Special
  • Miscellaneous
  • Conditional
  • Alignment and padding
• Stream manipulation
  • Field wrappers
  • Pure side effects
  • Other fields
• Tunneling tactics
  • Obtaining raw bytes
  • Endianness
  • Working with bytes subsets
  • Working with different bytes
  • Processing data with XOR and ROL
  • Compression and checksuming
  • Encryption and authentication
• Lazy parsing
  • Lazy
  • LazyStruct
  • LazyArray
  • LazyBound
• Adapters and Validators
  • Adapting
  • Validating and filtering
• Extending Malstruct
  • Adapters
  • Constructs
• Debugging Malstruct
  • Probe
  • Debugger

API Reference

• malstruct
  • malstruct package
• pecon package
  • Submodules
  • pecon.pecon module
  • Module contents

Indices and tables

• Index

• Module Index

• Search Page