-
Notifications
You must be signed in to change notification settings - Fork 742
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: R2Qiling with refactored memory and de-flatten plugin #1244
base: dev
Are you sure you want to change the base?
Commits on Dec 30, 2022
-
Configuration menu - View commit details
-
Copy full SHA for 0510096 - Browse repository at this point
Copy the full SHA 0510096View commit details -
Configuration menu - View commit details
-
Copy full SHA for 287e5f6 - Browse repository at this point
Copy the full SHA 287e5f6View commit details -
fix(r2): skip ill instruction in disassembler
in addition to 'invalid' instruction
Configuration menu - View commit details
-
Copy full SHA for 4f81f62 - Browse repository at this point
Copy the full SHA 4f81f62View commit details -
BUG: mips32 uc map 0x9000000 become 0x1000000
Configuration menu - View commit details
-
Copy full SHA for c336675 - Browse repository at this point
Copy the full SHA c336675View commit details -
Configuration menu - View commit details
-
Copy full SHA for d6b88b9 - Browse repository at this point
Copy the full SHA d6b88b9View commit details -
feat(r2): new APIs enhancing fine-grained analysis
Add new class AnalOp and Operand @Property r2.offset returns current offset New methods of R2: write(addr: int, bs: bytes) get_fcn_at(addr: int) -> Function get_bb_at(addr: int) -> BasicBlock get_fcn_bbs(addr: int) -> List[BasicBlock] dis(Function | BasicBlock) -> List[Instruction] New attributes of R2Data: __str__ can hexlify int __contains__ makes range checking easier @Property: start_ea, end_ea Fix an error in @aaa decorator to accept args
Configuration menu - View commit details
-
Copy full SHA for e9c8631 - Browse repository at this point
Copy the full SHA e9c8631View commit details -
feat(r2): PoC of de-flatten plugin
example deflat_r2.py tests a x86 program compiled with OLLVM -mllvm -fla see https://blog.quarkslab.com/deobfuscation-recovering-an-ollvm-protected-program.html
Configuration menu - View commit details
-
Copy full SHA for e310cb8 - Browse repository at this point
Copy the full SHA e310cb8View commit details -
Configuration menu - View commit details
-
Copy full SHA for b16e2c7 - Browse repository at this point
Copy the full SHA b16e2c7View commit details -
test(mem): remove assert_mem_equal, add option to use R2Qiling
assert_mem_equal is only needed for R2Qiling
Configuration menu - View commit details
-
Copy full SHA for 5e33859 - Browse repository at this point
Copy the full SHA 5e33859View commit details -
Configuration menu - View commit details
-
Copy full SHA for 2de22d1 - Browse repository at this point
Copy the full SHA 2de22d1View commit details -
feat(r2): load symbols from file if possible
refactor r2._cmd() to allow optional r_core passed
Configuration menu - View commit details
-
Copy full SHA for 7a1beb1 - Browse repository at this point
Copy the full SHA 7a1beb1View commit details -
refactor(r2): add addr wrap and move wrap to utils
@wrap_arg_addr makes function accept name/R2Data as addr and return same func when args is empty rename: get_fcn_at -> get_fcn rename: get_bb_at -> get_bb
Configuration menu - View commit details
-
Copy full SHA for dd679e9 - Browse repository at this point
Copy the full SHA dd679e9View commit details -
Configuration menu - View commit details
-
Copy full SHA for 580a758 - Browse repository at this point
Copy the full SHA 580a758View commit details
Commits on Dec 31, 2022
-
refactor(r2): improve shell and examples
r2.shell() can now be launched at an address (PC by default)
Configuration menu - View commit details
-
Copy full SHA for ab41d49 - Browse repository at this point
Copy the full SHA ab41d49View commit details -
refactor(r2): assume compatibility with ql.mem
only difference: use an extra dict cmap to store ctype buf map_info is the same as existing, no bytearray stored and updated
Configuration menu - View commit details
-
Copy full SHA for a53790e - Browse repository at this point
Copy the full SHA a53790eView commit details