Open lucab opened 10 years ago
This would be nice but it would be a lot easier to start with an architecture supported by QEMU (or S2E). I see Intel as the best candidate (yes it's present in many embedded systems!), then maybe PPC or Mips ? MSP430 would be nice as well, actually using mspdebug is a good idea.
FIE is interesting but requires source code, which isn't impossible, but is against one of the design choice of Avatar...
Avatar is currently ARM-only (with several sub-arch supported). It would be good to expand the framework to support other popular embedded architecture, starting from MSP430.
The recent Matasano/Stripe CTF showed that interest is rising into it.
mspdebug could be repurposed and plugged as both avatar emulator and target-bridge. Remote forwarding has to be developed.
FIE is perfoming symbolic execution through KLEE, so it could probably be plugged easily into mspdebug.