illera88 / Ponce

IDA 2016 plugin contest winner! Symbolic Execution just one-click away!
https://docs.idaponce.com
Other
1.48k stars 72 forks source link

Taint argvs, recv, fread #16

Closed 0ca closed 4 years ago

0ca commented 8 years ago

It could be veeery useful to automatically taint all the possible user inputs.

0ca commented 8 years ago

Tainting args is working now: image

It is a bit tricky because every time we are accesing memory from the IDA plugin we need to use the IDA API to read memory.

I also defined some global variables we could add to the configuration #15:

#define TAINT_ARGV true
#define TAINT_ARGC true
#define SKIP_ARGV0 true
#define TAINT_END_OF_STRING false