panda-re / panda

Platform for Architecture-Neutral Dynamic Analysis
https://panda.re
Other
2.46k stars 472 forks source link

plugin taint2 #1155

Open xri-wen opened 2 years ago

xri-wen commented 2 years ago

Whenever I use the plugin related to taint2(ida_taint2、tained_branch、tainted_net、serial_taint), (./panda/build/i386-softmmu/panda-system-i386 -m 4096 -monitor stdio -show-cursor -device usb-tablet -machine usb=on -replay 1101218 -panda stringsearch:str="kkkkkk" -panda tstringsearch -panda ida_taint2

./panda/build/i386-softmmu/panda-system-i386 -m 4096 -monitor stdio -show-cursor -device usb-tablet -machine usb=on -replay 1101218 -panda stringsearch:str="kkkkkk" -panda tstringsearch -panda tainted_net:query_outgoing_network=ture,file=kkkkkk_tnss.csv

./panda/build/i386-softmmu/panda-system-i386 -m 4096 -monitor stdio -show-cursor -device usb-tablet -machine usb=on -replay 1101218 -panda stringsearch:str="kkkkkk" -panda tstringsearch -panda tainted_branch -pandalog tsearhkkkkkk.plog

./panda/build/i386-softmmu/panda-system-i386 -m 4096 -monitor stdio -show-cursor -device usb-tablet -machine usb=on -replay 1101218 -panda stringsearch:str="kkkkkk" -panda tstringsearch -panda serial_taint )

I always get an error PNADA[core]:FAILED to load required plugin taint2 from ./panda/build/i386-softmmu/panda/plugins/panda_taint2.so

lacraig2 commented 2 years ago

Is the panda_taint2.so file in your file system at the location given? Did you build taint2?

xri-wen commented 2 years ago

2022-01-05 15-36-55 的螢幕擷圖 Is the panda_taint2.so file in your file system at the location given?->yes Did you build taint2?-> I think I have already built the whole panda with the code bellow cd panda mkdir -p build && cd build ../build.sh

The other plugins are work!

lacraig2 commented 2 years ago

That's odd. I would recommend debugging PANDA with gdb, break on this function, and see why exactly it's returning NULL.

It's likely that one of the environment variables it depends on is messed up in some way.

xri-wen commented 2 years ago

Ok, I hope I have enough time and ability to deal with it. Thanks a lot!