PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

LIEF - Library to Instrument Executable Formats

blog.quarkslab.com | research | #open-source | #binary-analysis | #pe | #mach-o | #elf | #lief
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Open-sourcing LIEF: a cross-platform library to parse and manipulate ELF, PE and Mach-O executables through one API with Python, C++ and C bindings, replacing ad-hoc per-project parsers.
Published
Collected

Related coverage

research · blog.quarkslab.com
Introducing QBDL: how to run the NVIDIA NGX SDK under Linux
The post introduces QBDL, a cross-platform library for loading ELF, PE and Mach-O binaries on foreign systems, and demonstrates running the NVIDIA NGX SDK under Linux with it.
research · blog.quarkslab.com
Have fun with LIEF and Executable Formats
LIEF 0.8.3: automated testing and packaging, a Dockerlief cross-compile utility, LibFuzzer integration for the ELF/PE/Mach-O parsers, and support for renaming ELF dynamic symbols via PT_DYNAMIC.
research · blog.quarkslab.com
Extending LLVM's BOLT-based Binary Analyser to Validate Stack Variable Initialisation
Quarkslab extended LLVM's BOLT-based binary analyser for OSTIF with a scanner that validates -ftrivial-auto-var-init at the binary level, verifying stack-variable initialisation hardening.
research · blog.quarkslab.com
QBDI vs TritonDSE against a VM: who will be the fastest?
Quarkslab solves a custom-VM CTF challenge twice — with symbolic execution engine TritonDSE and instrumentation framework QBDI — and compares which approach gets to the solution fastest.
research · blog.quarkslab.com
Introducing TritonDSE: A framework for dynamic symbolic execution in Python
Introducing TritonDSE, a Python library atop Triton for customizable dynamic symbolic execution: high-level program exploration primitives, hooks, and the base of PASTIS's white-box fuzzer.
research · blog.quarkslab.com
Quokka: A Fast and Accurate Binary Exporter
Quarkslab open-sources Quokka, a binary exporter that extracts a program's disassembly for offline analysis, letting users write complex analyses without disassembler APIs.
Back