Additional features
In addition to standard executable formats, LIEF supports DEX, VDEX, and OAT files.
Since v0.11, it also supports the parsing and the verification of PE's Authenticode.
Written in C++, LIEF tries to be the go-to library when you need to process ELF, PE, or Mach-O with a friendly API. It also supports compilation options so that the ELF parser is only 900Kb on AArch64.
2018
In 2018, we presented format modification techniques to perform code injection and hooking regardless of the underlying architecture.
2019
LIEF 0.10.1 came with enhanced Mach-O modifications to add load-commands, sections, segments, ...
2020
In 2020, we mostly worked on bug fixes and the enhancement of PE Authenticode that arrives in LIEF v0.11.0. In addition, we worked on refactoring the whole ELF builder so that it scales on large binaries.