rizinorg / rizin

UNIX-like reverse engineering framework and command-line toolset.
https://rizin.re
GNU Lesser General Public License v3.0
2.7k stars 361 forks source link

Reverse remote capabilities #570

Open caribpa opened 3 years ago

caribpa commented 3 years ago

Disclaimer This is a really low priority and wishful-thinking feature request. Only requested because, at some point in the future, the whole remote capabilities of Rizin maybe will be re-thought and possibly the future design allows for a painless/easy implementation of this feature.

Is your feature request related to a problem? Please describe. Consider adding reverse-remote-cmd/debugging capabilities in the same fashion it is possible for both a netcat/socat server and a client to send or receive files (as well as other actions such as reverse command execution).

The main use-case of this feature is to allow remote control of Rizin while bypassing Firewalls/IDS in CTF/Pentesting challenges.

Describe the solution you'd like

After receiving a connection, the server can use =!= <fd> to start a remote cmd mode with the client, who's serving their local rizin file. The client can also pass a reverse local debugging session: rz rrap://10.0.0.8:8080/dbg://rizin

The idea is that the other protocols would also have a reverse variant: rgdb, rwindbg, etc.

On the interactive command line, the reverse-connection-family could be under =r to keep it sane.

Describe alternatives you've considered 💔

Additional context Haven't tried it, but according to this post, windbg supports reverse-remote debugging, though it doesn't seem to be the case for gdb.

stale[bot] commented 3 years ago

This issue has been automatically marked as stale because it has not had recent activity. Considering a lot has probably changed since its creation, we kindly ask you to check again if the issue you reported is still relevant in the current version of rizin. If it is, update this issue with a comment, otherwise it will be automatically closed if no further activity occurs. Thank you for your contributions.

stale[bot] commented 2 years ago

This issue has been automatically marked as stale because it has not had recent activity. Considering a lot has probably changed since its creation, we kindly ask you to check again if the issue you reported is still relevant in the current version of rizin. If it is, update this issue with a comment, otherwise it will be automatically closed if no further activity occurs. Thank you for your contributions.

stale[bot] commented 2 years ago

This issue has been automatically marked as stale because it has not had recent activity. Considering a lot has probably changed since its creation, we kindly ask you to check again if the issue you reported is still relevant in the current version of rizin. If it is, update this issue with a comment, otherwise it will be automatically closed if no further activity occurs. Thank you for your contributions.