search

jchristman / PyDA

Python binary DisAssembler
http://suntzuii.github.io/PyDA/
Other
26 stars 10 forks source link

Implement Searching #19

Open direwolf314 opened 10 years ago

direwolf314 commented 10 years ago

Give the ability to search by bytes, opcodes, text, immediate, comment, etc.

jchristman commented 10 years ago

Can hook the rest of these in later - but the ability to find by address is there. Therefore, it is possible to hook in a search function for all of these when we grab the whole line it's on. This is 90% done

direwolf314 commented 10 years ago

Subtasking: Give the user the ability to search for instruction sequences. Could be really helpful for patching away anti-disassembly tricks. Like the one featured here: http://jgeralnik.github.io/writeups/2014/06/12/rarara/

wiseone13 commented 10 years ago

In addition, you should be able to search for sequences of bytes to use for ROP. Maybe add an integrated ROP gadget finder?

On Fri, Jun 20, 2014 at 7:47 AM, direwolf314 notifications@github.com wrote:

Subtasking: Give the user the ability to search for instruction sequences. Could be really helpful for patching away anti-disassembly tricks. Like the one featured here: http://jgeralnik.github.io/writeups/2014/06/12/rarara/

— Reply to this email directly or view it on GitHub https://github.com/suntzuII/PyDA/issues/19#issuecomment-46674230.

jchristman commented 10 years ago

We could probably easily integrate the actual ROPgadget tool - it is also based on capstone at this point. We should probably contact the author and ask permission though...

Sent from my iPhone

On Jun 20, 2014, at 9:28, stealthpants notifications@github.com wrote:

In addition, you should be able to search for sequences of bytes to use for ROP. Maybe add an integrated ROP gadget finder?

On Fri, Jun 20, 2014 at 7:47 AM, direwolf314 notifications@github.com wrote:

Subtasking: Give the user the ability to search for instruction sequences. Could be really helpful for patching away anti-disassembly tricks. Like the one featured here: http://jgeralnik.github.io/writeups/2014/06/12/rarara/

— Reply to this email directly or view it on GitHub https://github.com/suntzuII/PyDA/issues/19#issuecomment-46674230.

— Reply to this email directly or view it on GitHub.