Skip to content

SomeOtherDev/pe-parser

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

70 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Build & Test Fuzzing

A blazing fast 🔥 PE Parser written in Rust

Motivation

The main goals of pe-parser is to write something suitable for a PE Loader.

Is editing supported?

Currently no, but it wouldn't be too difficult to add from the current backbone.

How does it handle unsual or malformed PEs?

As long as the PE conforms to the standard outlined in Microsoft's documentation, it should read fine. Malformed PEs would likely run into issues of either returning an error or misreading data.

What is parsed right now?

  • COFF Header
  • Optional Header
  • Data Directories
  • Section Tables/Headers

What is not parsed yet?

  • COFF Relocations
  • COFF Line Numbers
  • COFF Symbol Table
  • COFF String Table
  • Certificate Table
  • Delay-Load Import Table
  • .debug Section
  • .drectve Section
  • .edata Section
  • .idata Section
  • .pdata Section
  • .reloc Section
  • .tls Section
  • Load Config Structure
  • .rsrc Section
  • .cormeta Section
  • .sxdata Section

About

PE Parsing, but blazing fast

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Rust 99.2%
  • Other 0.8%