lief-project/LIEF
LIEF
LIEF es un framework para analizar, modificar y analizar formatos binarios ejecutables y cachés compartidas del sistema en múltiples plataformas. Sirve como biblioteca multiplataforma para la manipulación programática de archivos binarios ELF, PE y MachO.
El proyecto proporciona herramientas para alterar la estructura interna y las secciones de archivos ejecutables para cambiar el comportamiento del programa. Incluye además un analizador dedicado para recuperar bibliotecas dinámicas individuales de cachés compartidas del sistema combinadas.
El conjunto de herramientas cubre el análisis de ejecutables binarios, desensamblado de código máquina y la extracción de metadatos de depuración e información de símbolos. Admite además la traducción bidireccional de código máquina y ensamblador a través de varias arquitecturas de procesador.
Features
- Binary Analysis Tools - Provides a comprehensive library for inspecting, disassembling, and extracting information from compiled binary files.
- Format-Specific Parsers - Ships format-specific parsers to interpret the structural specifications of ELF, PE, and MachO files.
- In-Place Binary Mutators - Provides capabilities for in-place binary mutation to update specific offsets and headers without rewriting the entire file.
- Bi-Directional Disassembly Engines - Implements a bidirectional engine to translate between raw machine code and human-readable assembly instructions.
- Binary Format Manipulators - Provides a framework for altering the internal structure and sections of executable files to modify program behavior.
- Binary Object Models - Provides a common internal object model to consistently manipulate different executable binary formats across operating systems.
- Cross-Format Binary Analysis - Provides a unified framework for altering internal components across different binary executable formats.
- ELF Layout Analysis - Analyzes the structural organization, symbols, and dependencies of various executable binary formats.
- Executable File Modifications - Alters binary components by adding sections or renaming symbols to programmatically change executable behavior.
- Binary Parsing - Parses binary-encoded modules into internal representations to provide a programmatic view of executable structures.
- Shared Cache Parsing - Parses and extracts individual dynamic libraries from combined system-wide binary shared caches.
- Symbol Table Resolution - Implements symbol table resolution to map memory addresses to human-readable names using internal metadata.
- Debug Symbol Extractors - Extracts symbolic names and debugging metadata from compiled binary files and symbol files.
- Binary Assembly - Includes a utility to convert human-readable assembly instructions back into executable binary machine code.
- Binary Disassembly - Translates machine code from various processor architectures into human-readable assembly language.
- Binary Analysis Frameworks - Instrument, parse, and rebuild PE, ELF, Mach-O, and DEX formats.
- Binary Analysis Platforms - Library for instrumenting and modifying executable file formats.
