LIEF
libear
Our great sponsors
LIEF | libear | |
---|---|---|
4 | 2 | |
4,127 | 24 | |
1.9% | - | |
9.4 | 6.8 | |
12 days ago | 8 days ago | |
C++ | C++ | |
Apache License 2.0 | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
LIEF
-
What's the Most Portable Way to Include Binary Blobs in an Executable?
My team is working on this problem in the context of creating Node.js single-executable applications. While the naive approach of just appending data at the end of the binary works, it is not friendly with code-signature in macOS and Windows given that signing operates on PE and Mach-O sections.
We have recently open-sourced a small tool called Postject (https://github.com/postmanlabs/postject), which is able to inject arbitrary data as proper ELF/Mach-O/PE sections for all major operating systems (with AIX support coming). The tool also provides C/C++ cross-platform headers for easily traversing the final binary and introspect whether the segment is present or not.
The tool is based on the LIEF (https://github.com/lief-project/LIEF) project.
At Postman, we are making use of this on our custom Node.js single-executable applications and soon on our custom Electron.js builds too.
-
Pefile python module features
https://github.com/lief-project/LIEF https://lief-project.github.io/doc/latest/api/python/index.html
-
Collection of tools for executable packing detection
Bintropy: Entropy-based packing detection featuring multiple modes (whole binary, per section or segment). Based on the awesome LIEF library, therefore supports ELF, PE, Mach-O.
-
rabin2 for scraping ELF to JSON
I've been looking at LIEF toolkit for similar purposes (https://github.com/lief-project/LIEF). It's a python framework for cross platform binary analysis. I'm curious, does rabin2 support dll format?
libear
-
Object-Based Audio Renderer
The BBC did a lot of work in this area (disclaimer: I worked for them), including creating an open source renderer: https://www.bbc.co.uk/rd/blog/2019-08-libear-ebu-audio-renderer-next-generation-open-source. The code is here: https://github.com/ebu/libear. Start at https://github.com/ebu/libear/blob/master/examples/objects_gains.cpp and work back through the code.
-
What's the Most Portable Way to Include Binary Blobs in an Executable?
My colleague wrote this solution for C++ and cmake:
https://github.com/ebu/libear/commit/40a4000296190c3f91eba79...
This is a cmake function which generates C++ files using no external tools. It's probably not very fast, but if you don't need to handle big files and are already using cmake this is easy to integrate, adds no dependencies and works on all platforms.
What are some alternatives?
dll-proxy-generator - Creates a proxy dll which sits between the game and original dll
radare2 - UNIX-like reverse engineering framework and command-line toolset
tree-sitter-html - HTML grammar for Tree-sitter
pe - A :zap: lightweight Go package to parse, analyze and extract metadata from Portable Executable (PE) binaries. Designed for malware analysis tasks and robust against PE malformations.
vivaldi_modding - Custom modifications for Vivaldi web browser.
bintropy - Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes
goblin - An impish, cross-platform binary parsing crate, written in Rust
the-backdoor-factory - Patch PE, ELF, Mach-O binaries with shellcode new version in development, available only to sponsors
XAPKDetector - APK/DEX detector for Windows, Linux and MacOS.
PyPackerDetect - A malware dataset curation tool which helps identify packed samples.
sleighcraft - sleigh craft!
peid - Python implementation of the Packed Executable iDentifier (PEiD)