{
  "added_at": "2026-11-02",
  "additional_evidence_urls": [
    "https://github.com/packing-box/awesome-executable-packing/blob/9e41a9b10b45535c1278259129ec8eaf287b8a42/CONTRIBUTING.md",
    "https://github.com/packing-box/awesome-executable-packing/blob/9e41a9b10b45535c1278259129ec8eaf287b8a42/LICENSE"
  ],
  "category": "related-lists",
  "description_en": "A single-README list of resources on executable packing, meaning the bundling, compression, encryption, mutation, protection or virtualization of PE, ELF and other executables, including Android apps, and on detecting and unpacking packed files. About 770 entries are grouped into documentation, dated scientific papers, sample datasets, packers sorted by era from before 2000 to after 2010, and tools for packer identification, unpacking and binary analysis.",
  "description_zh": "以单个 README 维护的可执行文件加壳资源清单。加壳指对 PE、ELF 等可执行文件（包括 Android 应用）进行打包、压缩、编码、加密、变形、保护或虚拟化，清单也涵盖已加壳文件的检测与脱壳。约 770 个条目分为文档、注明日期的学术论文、样本数据集、按年代（2000 年以前至 2010 年以后）排列的加壳工具，以及用于加壳识别、脱壳和二进制分析的工具。",
  "entry_url": "https://awesomerea.org/resources/awesome-executable-packing/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/awesome-executable-packing/",
  "evidence_url": "https://github.com/packing-box/awesome-executable-packing/blob/9e41a9b10b45535c1278259129ec8eaf287b8a42/README.md",
  "group": "learn",
  "id": "awesome-executable-packing",
  "json_url": "https://awesomerea.org/resources/awesome-executable-packing/record.json",
  "kind": "collection",
  "markdown_url": "https://awesomerea.org/resources/awesome-executable-packing/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/awesome-executable-packing/index.md",
  "name": "Awesome Executable Packing",
  "name_zh": "Awesome Executable Packing 可执行文件加壳资源清单",
  "record_type": "resource",
  "relationship": "learning",
  "requirements": [
    "The reviewed README, committed 2026-10-10, has 768 list rows: 94 documentation links and 328 scientific publications under Literature, 37 datasets, 190 packers (90 after 2010, 41 from 2000 to 2010 and 59 before 2000) and 119 tools. All but one publication give a month and year; Literature rows carry emoji type markers and 110 publications carry a star, neither of which the README explains. One documentation row links to the list itself.",
    "Rows give a name, a link and usually a one-line description, with no license, maintenance or platform fields, and many packers and tools are specific to Windows PE files. Packer rows point to vendor sites, SourceForge, GitHub projects, blog analyses and 30 Internet Archive copies of old pages or download archives.",
    "The Datasets section lists public malware repositories and feeds next to packed and benign PE and ELF sample sets and benchmark datasets such as EMBER and SOREL-20M. Samples obtained through them can be live malicious software and fall under each provider's access terms.",
    "CC0-1.0 for the list; CONTRIBUTING.md asks for alphabetically sorted rows and one commit per suggestion. Linked papers, packers, tools and datasets keep their own licenses. An independent discovery list."
  ],
  "requirements_zh": [
    "所审阅的 README 提交于 2026-10-10，共有 768 行条目：“文献”下有 94 个文档链接和 328 篇学术论文，另有 37 个数据集、190 个加壳工具（2010 年以后 90 个、2000 至 2010 年 41 个、2000 年以前 59 个）和 119 个工具。除一篇外，所有论文都注明了年月；“文献”条目带有表示类型的表情符号，110 篇论文带有星标，README 对二者均未加说明。其中一个文档条目链接的就是本清单。",
    "条目给出名称、链接，通常还有一句说明，但没有许可证、维护状态或平台字段；许多加壳工具和分析工具仅适用于 Windows PE 文件。加壳工具条目指向厂商网站、SourceForge、GitHub 项目、博客分析，以及 30 个旧网页或下载压缩包的互联网档案馆副本。",
    "“数据集”部分将公开的恶意软件样本库和样本源，与已加壳及正常的 PE、ELF 样本集，以及 EMBER、SOREL-20M 等基准数据集并列。经由这些来源获得的样本可能是可运行的恶意软件，并受各提供方的访问条款约束。",
    "清单采用 CC0-1.0；CONTRIBUTING.md 要求条目按字母顺序排列，每条建议一个提交。所链接的论文、加壳工具、分析工具和数据集各自保留其许可证。这是独立的发现清单。"
  ],
  "targets": [
    "app",
    "binary"
  ],
  "url": "https://github.com/packing-box/awesome-executable-packing",
  "verification": "source-reviewed",
  "verified_at": "2026-10-20"
}