search

sandialabs / halucinator

Main HALucinator branch
Other
37 stars 3 forks source link

Document about runing sample VxWorks firmware? #3

Open JsHuang opened 1 year ago

JsHuang commented 1 year ago

Hi, is there any detailed documents about how to run the VxWorks firmware in your "Case Study" paper? Thanks.

JsHuang commented 1 year ago

Also. Can you add the vxworks firmware you are testing with halucinator into the test samples?

zunlongzhou commented 1 year ago

Have you solved it? I also want to know how to run vxworks

lrcarp17 commented 1 year ago

The short answer is we cant provide you with the samples because we don't own them. You can download the Scada Pack 350 firmware from the Schneider Electrics website. Some of the data used in the case study was pulled from the physical device. However, you should still be able to emulate it without this data. The main thing is to make sure you have the symbols table from the firmware you want to emulate. This can be retrieved with the provided ghidra scripts. The next thing is getting the memory map set up correctly. This requires knowing the device's processor and then using the datasheet to get the memory map. Once you have that, set the entry point to UsrInit or UsrRoot and emulation should start to work.