Meta tags:
description=LIEF is a cross-platform C++, Python, and Rust library to parse, analyze, modify, assemble, disassemble, and rewrite ELF, PE, Mach-O, and other executable formats.;
author=Romain Thomas;

Headings (most frequently used words):

lief, and, library, to, executable, formats, one, support, instrument, every, layer, binary, insight, in, few, lines, watch, move, through, go, beyond, file, from, the, blog, project, developers, community, unified, abstraction, parse, inspect, modify, rebuild, cross, format, typed, discoverable, ready, rewrite, assembler, disassembler, dwarf, editor, pdb, v1, v0, 17, patchelf,

Text of the page (most frequently used words):
lief (39), and (26), elf (25), the (24), #binary (19), extended (10), api (10), executable (9), with (9), #format (9), inspect (8), x86 (7), parse (7), formats (6), add (6), from (6), call (6), marker (6), pt_load (6), project (5), one (5), read (5), python (5), instructions (5), assemble (5), write (5), patch (5), demo (5), sponsor (4), modify (4), build (4), patchelf (4), work (4), code (4), for (4), core (4), rewrite (4), disassemble (4), entrypoint (4), segment (4), instrumented (4), source (3), docs (3), blog (3), download (3), article (3), change (3), romain (3), thomas (3), assembly (3), import (3), new (3), cross (3), platform (3), rust (3), engineering (3), development (3), open (3), pdb (3), dwarf (3), same (3), model (3), reverse (3), every (3), aware (3), size (3), load (3), inst (3), entry (3), instrument (3), explore (3), through (3), section (3), sections (3), print (3), mach (3), library (3), 2026 (2), community (2), doxygen (2), about (2), apache (2), across (2), binaries (2), jul (2), 2025 (2), feature (2), back (2), changes (2), support (2), quansight (2), structured (2), decode (2), metadata (2), disassembler (2), assembler (2), disassembly (2), workflows (2), file (2), mutation (2), rebuild (2), use (2), serialize (2), disk (2), then (2), into (2), object (2), 0x40107f (2), parsed (2), elf64 (2), ready (2), assembled (2), rbp (2), 0x401070 (2), list (2), type (2), content (2), move (2), transformation (2), ssh (2), without (2), concepts (2), symbols (2), architecture (2), 000 (2), documentation (2), crates, pypi, discord, developers, licensed, platforms, based, reimplementation, nixos, interpreter, dependencies, edit, rpath, runpath, prebuilt, ninja, ghidra, plugins, contextual, patching, refactored, module, tls, export, editing, sep, runtime, faster, bindings, stable, abi, free, threaded, wheels, view, all, posts, release, notes, deep, dives, stories, updates, discuss, help, prioritize, demanding, fund, public, private, long, term, maintenance, sponsorship, gives, maintainers, time, improve, coverage, respond, ecosystem, features, can, rely, sustain, meet, supports, continued, active, microsoft, program, databases, alongside, they, describe, transform, rich, debug, information, apis, editor, machine, connect, arm64, risc, directly, discover, advanced, tooling, familiar, deeper, esrever, beyond, are, capabilities, stages, note, replace, nops, locate, analyze, append, readable, pipeline, data, rodata, text, phdr, bit, builder, complete, bytes, instruction, replaced, place, address, nop, 0x401030, 0x401071, mov, rsp, push, decoded, next, is_call, mapped, 0x40c000, added, flags, injected, extend, none, not, assert, play, follow, documented, workflow, parsing, analysis, rebuilt, watch, live, name, header, patched, 0x401000, hex, usr, bin, point, turn, inspection, changing, tools, typed, discoverable, start, generic, stay, recognizable, whether, you, insight, few, lines, comprehensive, result, builders, files, memory, their, structure, booting, heavyweight, stack, relocations, points, shared, unified, abstraction, abstract, raw, high, level, representation, make, precise, valid, layer, built, installs, month, years, continuous, battle, tested, infrastructure, more, consistent, available, overview, home, skip,

Text of the page (random words):
lief library to instrument executable formats skip to content lief home blog download documentation documentation overview doxygen about extended sponsor new lief 1 0 0 is available lief library to instrument executable formats parse inspect modify and build elf pe mach o and more through one consistent c python or rust api read the api docs download 1 0 0 apache 2 0 cross platform binary architecture elf pe mach o dwarf pdb disassembler assembler battle tested binary infrastructure 10 years of continuous development 1 000 000 installs every month built for binary workflows one library every layer move from raw executable file formats to a high level representation make precise changes then write a valid binary back to disk explore the architecture 01 abstract unified abstraction work with symbols sections relocations and entry points through shared concepts across executable formats 02 inspect parse and inspect open binaries from files or memory and explore their structure without booting a heavyweight reverse engineering stack 03 rewrite modify and rebuild add sections change symbols patch metadata and serialize the result with format aware builders a comprehensive api binary insight in a few lines the same concepts stay recognizable whether you work in python c or rust 01 cross format start with a generic binary 02 typed and discoverable use a structured object model 03 ready to rewrite turn inspection code into transformation code without changing tools inspect py 01 import lief 02 03 parse elf pe or mach o with one entry point 04 binary lief parse usr bin ssh 05 06 print binary format 07 print hex binary entrypoint 08 09 for section in binary sections 10 print section name section size 11 12 modify and write a new binary 13 binary header entrypoint 0x401000 14 binary write ssh patched live binary transformation watch one executable move through lief follow a documented x86 64 elf workflow from parsing and format analysis to an assembled patch and a rebuilt binary explore the python api instrument py play 01 load lief core import lief elf lief elf parse demo elf assert elf is not none parsed executable elf64 x86 64 entry 0x401070 02 inspect extend lief core marker lief elf segment marker type lief elf segment type load marker add lief elf segment flags r marker content list b lief instrumented 0 injected elf add marker format aware mutation pt_load added r mapped at 0x40c000 03 disassemble lief extended instructions list elf disassemble elf entrypoint 64 call next inst for inst in instructions if inst is_call decoded instructions 0x401070 push rbp 0x401071 mov rbp rsp 0x40107f call 0x401030 04 assemble patch lief extended patch elf assemble call address nop n call size instruction replaced in place 5 bytes assembled e8 ac ff ff ff 90 90 90 90 90 05 rewrite lief core elf write demo instrumented builder complete demo instrumented elf64 x86 64 ready elf demo elf demo instrumented 64 bit x86 64 parsed phdr pt_load text pt_load rodata pt_load data pt_load lief 0x40107f e8 ac ff ff ff 90 90 90 90 90 pipeline python x86 64 elf 01 load the executable parse the elf into lief s object model lief elf parse 02 inspect and add a segment analyze the format then append a readable pt_load elf add marker 03 disassemble code extended decode the entrypoint and locate a call elf disassemble 04 assemble the patch extended replace the x86 call with same size nops elf assemble 05 rewrite the binary serialize every format aware change to disk elf write api note disassembly and assembly are lief extended capabilities the mutation and rebuild stages use the open source core api lief extended go beyond file formats advanced assembly disassembly dwarf and pdb tooling build on the same familiar lief model for deeper binary reverse reverse esrever engineering workflows discover extended read the extended docs assembler assemble x86 64 arm64 risc v instructions directly from the api disassembler decode machine code and connect instructions to executable metadata dwarf editor inspect and transform rich debug information with structured apis pdb support work with microsoft program databases alongside the binary they describe active sponsor quansight supports lief s continued development meet quansight sustain the project support sponsorship gives lief maintainers the time to improve format coverage respond to ecosystem changes and build features the community can rely on back long term open source maintenance fund public or private feature development help prioritize demanding platform work sponsor lief discuss a feature project updates from the lief blog release notes format deep dives and engineering stories from the project view all posts jul 13 2026 romain thomas lief v1 0 0 lief 1 0 0 a new cross platform runtime api faster rust bindings stable abi and free threaded python wheels read article sep 14 2025 romain thomas lief v0 17 0 lief 0 17 0 binary ninja and ghidra plugins contextual assembly patching a refactored pe module with tls import and export editing lief patchelf and read article jul 13 2025 romain thomas lief patchelf lief patchelf a lief based reimplementation of nixos patchelf to change the interpreter add dependencies and edit rpath runpath with prebuilt binaries read article lief one api to inspect modify and build executable formats across platforms apache 2 0 licensed project download blog about developers api docs doxygen source community discord sponsor 2026 lief project pypi crates io lief extended