search

cyber-defence-campus / morion

Morion is a PoC tool to experiment with symbolic execution on real-word (ARMv7) binaries.
Apache License 2.0
6 stars 1 forks source link

Add Accessed Regs/Mems in Hooked Functions #14

Open pdamian opened 9 months ago

pdamian commented 9 months ago

When hooking a function (e.g. sscanf(str, format, ...)) during tracing, used arguments (e.g. format / "%s %s") should be added to GdbTracer._accessed_regs or GdbTracer._accessed_mems.

When doing so, an analyst wouldn't have to manually add these in the YAML's states:entry:.