Harvest ELF

Harvest ELF provides a datatype for the ELF format¹ that leverages Data.Binary² to provide a fast, accurate typed representation of ELF designed to be resilient against maliciously crafted ELF files.

TODO

• Provide a segment view
• Add features as needed once disassembly work has started.

Tested on

• GCC output³
• LLVM output⁴
• Linux Tsunami backdoor⁵

Footnotes

1. https://github.com/torvalds/linux/blob/master/include/uapi/linux/elf.h ↩

2. https://hackage.haskell.org/package/binary-0.10.0.0/docs/Data-Binary.html ↩

3. https://gcc.gnu.org/ ↩

4. https://llvm.org ↩

5. https://www.virustotal.com/gui/file/15c7fe5a56b80a43544c3227a8589045bf67d0a65c2ebba2506102250f6da963 ↩