taviso/loadlibrary

Features

• Windows DLL Loaders for Linux - Loads Windows PE/COFF DLLs into a Linux process, resolving imports and relocations for native execution.
• Windows PE Execution Layers - Loads and executes Windows PE/COFF DLLs natively within Linux processes for testing and analysis.
• Windows Library Fuzzers for Linux - Loads self-contained Windows DLLs into a Linux process and tests them for memory corruption bugs using tools like ASAN and Valgrind.
• DLL Injection Hooks - Replaces exported DLL functions with custom implementations at runtime to intercept calls for instrumentation or fuzzing.
• Windows DLL Function Lookups - Looks up and invokes exported functions from loaded Windows DLLs using a dlopen-style API.
• Windows DLL Invocations - Invokes exported functions from loaded Windows DLLs as if they were native Linux library routines.
• PE/COFF Loaders - Maps Windows portable executable files into a Linux process address space, resolving imports and relocations without a native Windows loader.
• Windows API Call Redirectors - Redirects Windows API calls from loaded DLLs to Linux-native implementations for cross-platform execution.
• Trampoline-Based Hook Engines - Intercepts function calls by disassembling target code and inserting trampolines that redirect execution to custom handlers.
• Binary Translation Layers - Provides a binary translation layer that enables Windows DLLs to execute natively on Linux through memory mapping and patching.
• Linux DLL Loaders - Maps Windows portable executable files into Linux memory and resolves imports and relocations for native execution.
• Windows DLL Loaders for Linux - Loads Windows PE/COFF binaries into a Linux process and resolves their imports for native execution.
• Windows DLL Instrumentation Frameworks - Ships a binary instrumentation framework that loads and executes Windows DLLs natively on Linux for analysis.
• Library Fuzzings - Loads self-contained Windows DLLs on Linux and tests them for memory corruption bugs using ASAN and Valgrind.
• Windows Library Fuzzers for Linux - Fuzzes Windows libraries on Linux to find memory corruption bugs using sanitizers and coverage feedback.
• Cross-Platform Function Invocations - Invokes exported functions from Windows DLLs as if they were native Linux library calls.
• Runtime Function Hooking - Provides runtime function interception and redirection for Windows DLLs loaded natively on Linux.
• Binary Code Coverage Auditors - Records every basic block executed in loaded Windows DLLs and produces coverage reports for fuzzing corpus distillation.
• Heap Corruption Detection - Runs loaded Windows DLLs under ASAN and Valgrind to detect heap overflows, use-after-free, and memory corruption bugs.
• GDB Extensions - Attaches GDB to loaded Windows DLLs with full symbol support, breakpoints, and stack traces for debugging.
• Cross-Platform DLL Debuggers - Attaches GDB to loaded Windows DLLs with full symbol support, breakpoints, and stack traces for source-level debugging.
• Malware Scanning - Runs a ported Windows antivirus engine on Linux to scan files for malware using the mpclient tool.
• Windows Antivirus Engine Ports - Ports a Windows antivirus engine to Linux and uses it to scan files for malware and threats.
• Binary Corpus Distillation - Reduces large fuzzer input sets to minimal subsets that still exercise all recorded code paths for efficient fuzzing.
• Corruption Detectors - Leverages AddressSanitizer and Valgrind to detect buffer overflows, use-after-free, and other memory safety bugs in loaded Windows code.
• Code Coverage Analysis - Collects basic block coverage data from loaded Windows DLLs and produces reports for fuzzing corpus distillation.
• Binary Basic Block Coverage Auditors - Collects and audits basic block coverage from loaded Windows DLLs to identify untested code paths.
• Binary Analysis - Ports Windows DLLs to run on Linux.

Star history