nice patch and good job, would be nice to work cause with confinement it's hard to use my docker containers.
My company uses 3.1 version anyconnect and i tried your patch
Unfortunately it's not working
First i tried with old version of radare2 (2.3) on ubuntu
Second i update radare2 to 4.6
In both cases the vpnagentd has errors
Run File: ../../vpn/Agent/MainThread.cpp Line: 341 Invoked Function: CHostConfigMgr::StartInterfaceMonitoring Return Code: 130974320
What version of radare2 do u used ?
Eric
Outputs
with 2.3
sudo python3 anyconnect_patch.sh
WARNING : block size exceeding max block size at 0x000187ac
[+] Try changing it with e anal.bb.maxsize
Found method @ 0x000212d0
WARNING : block size exceeding max block size at 0x000187ac
[+] Try changing it with e anal.bb.maxsize
Looks like it's called from: 0x76465
WARNING : block size exceeding max block size at 0x000187ac
[+] Try changing it with e anal.bb.maxsize
Patching Completed Successfully
with 4.6
sudo python3 anyconnect_patch.sh
Warning: run r2 with -e io.cache=true to fix relocations in disassembly
Invalid address from 0x000272fb
Invalid address from 0x00048e23
Invalid address from 0x00048715
Invalid address from 0x000554b7
Invalid address from 0x000800fe
Invalid address from 0x00088a49
Found method @ 0x000212d0
Warning: run r2 with -e io.cache=true to fix relocations in disassembly
Invalid address from 0x000272fb
Invalid address from 0x00048e23
Invalid address from 0x00048715
Invalid address from 0x000554b7
Invalid address from 0x000800fe
Invalid address from 0x00088a49
Looks like it's called from: 0x76465
Warning: run r2 with -e io.cache=true to fix relocations in disassembly
Invalid address from 0x000272fb
Invalid address from 0x00048e23
Invalid address from 0x00048715
Invalid address from 0x000554b7
Invalid address from 0x000800fe
Invalid address from 0x00088a49
Patching Completed Successfully
Job for vpnagentd.service failed because the control process exited with error code.
See "systemctl status vpnagentd.service" and "journalctl -xe" for details.
Hi Garrett,
nice patch and good job, would be nice to work cause with confinement it's hard to use my docker containers.
My company uses 3.1 version anyconnect and i tried your patch Unfortunately it's not working First i tried with old version of radare2 (2.3) on ubuntu Second i update radare2 to 4.6
In both cases the vpnagentd has errors Run File: ../../vpn/Agent/MainThread.cpp Line: 341 Invoked Function: CHostConfigMgr::StartInterfaceMonitoring Return Code: 130974320
What version of radare2 do u used ?
Eric
Outputs with 2.3
sudo python3 anyconnect_patch.sh WARNING : block size exceeding max block size at 0x000187ac [+] Try changing it with e anal.bb.maxsize Found method @ 0x000212d0 WARNING : block size exceeding max block size at 0x000187ac [+] Try changing it with e anal.bb.maxsize Looks like it's called from: 0x76465 WARNING : block size exceeding max block size at 0x000187ac [+] Try changing it with e anal.bb.maxsize Patching Completed Successfully
with 4.6
sudo python3 anyconnect_patch.sh Warning: run r2 with -e io.cache=true to fix relocations in disassembly Invalid address from 0x000272fb Invalid address from 0x00048e23 Invalid address from 0x00048715 Invalid address from 0x000554b7 Invalid address from 0x000800fe Invalid address from 0x00088a49 Found method @ 0x000212d0 Warning: run r2 with -e io.cache=true to fix relocations in disassembly Invalid address from 0x000272fb Invalid address from 0x00048e23 Invalid address from 0x00048715 Invalid address from 0x000554b7 Invalid address from 0x000800fe Invalid address from 0x00088a49 Looks like it's called from: 0x76465 Warning: run r2 with -e io.cache=true to fix relocations in disassembly Invalid address from 0x000272fb Invalid address from 0x00048e23 Invalid address from 0x00048715 Invalid address from 0x000554b7 Invalid address from 0x000800fe Invalid address from 0x00088a49 Patching Completed Successfully Job for vpnagentd.service failed because the control process exited with error code. See "systemctl status vpnagentd.service" and "journalctl -xe" for details.