To help you get started, we've collected the most common ways that lief is being used within popular public projects.

lief-project / LIEF / tests / elf / test_static.py View on Github

#!/usr/bin/env python
import unittest
import logging
import os
import sys
import subprocess
import tempfile
import shutil
import lief
from lief import Logger
Logger.set_level(lief.LOGGING_LEVEL.INFO)

from subprocess import Popen
from unittest import TestCase

from utils import get_compiler

BINADD_C = """\
#include 
#include 

int add(int a, int b);

int main(int argc, char **argv) {
  if (argc != 3) {
    printf("Usage: %s <a> <b>\\n", argv[0]);
    exit(-1);</b></a>

View more ways to use lief

About

The purpose of this project is to provide a cross platform library that can parse, modify and abstract ELF, PE and MachO formats.

Main features:

> - Parsing: LIEF can parse ELF, PE, MachO, OAT, DEX, VDEX, ART > and provides an user-friendly API to access to format internals. > - Modify: LIEF enables to modify some parts of these formats > - Abstract: Three formats have common features like sections, > symbols, entry point... LIEF factors them. > - API: LIEF can be used in C, C++ and Python

Downloads / Install

First, make sure to have an updated version of setuptools:

$ pip install setuptools --upgrade

To install the latest version (release):

$ pip install lief

To install nightly build:

$ pip install [--user] --index-url https://lief.s3-website.fr-par.scw.cloud/latest lief

Getting started

Python

import lief

# ELF
binary = lief.parse("/usr/bin/ls")
print(binary)

# PE
binary = lief.parse("C:\\Windows\\explorer.exe")
print(binary)

# Mach-O
binary = lief.parse("/usr/bin/ls")
print(binary)

C++

#include 

int main(int argc, char** argv) {
  // ELF
  try {
    std::unique_ptr elf = LIEF::ELF::Parser::parse("/bin/ls");
    std::cout << *elf << '\n';
  } catch (const LIEF::exception& err) {
    std::cerr << err.what() << '\n';
  }

  // PE
  try {
    std::unique_ptr pe = LIEF::PE::Parser::parse("C:\\Windows\\explorer.exe");
    std::cout << *pe << '\n';
  } catch (const LIEF::exception& err) {
    std::cerr << err.what() << '\n';
  }

  // Mach-O
  try {
    std::unique_ptr macho = LIEF::MachO::Parser::parse("/bin/ls");
    std::cout << *macho << '\n';
  } catch (const LIEF::exception& err) {
    std::cerr << err.what() << '\n';
  }

  return 0;
}

C (Limited API)

#include 

int main(int argc, char** argv) {
  Elf_Binary_t* elf = elf_parse("/usr/bin/ls");

  Elf_Section_t** sections = elf->sections;

  for (size_t i = 0; sections[i] != NULL; ++i) {
    printf("%s\n", sections[i]->name);
  }

  elf_binary_destroy(elf);
  return 0;
}

Documentation

• Main documentation
• Tutorial
• API
• Doxygen

Contact

• Mail: contact at lief.re
• Gitter: lief-project

Authors

Romain Thomas @rh0main - Quarkslab

LIEF is provided under the Apache 2.0 license