capa


capa

capa is an open source tool for identifying features in executable files. 

You run it for a PE, ELF, .NET file, or shell code, and it tells you what it thinks the program can do. 

☝🏻For example, it can be assumed that the file is a backdoor, capable of installing services, or uses HTTP for communication.



Go back
26-01-2023, 13:58