Git Product home page Git Product logo

mipsaudit's Introduction

IDAPython mipsAudit

简介

这是一个简单的IDAPython脚本。

进一步来说是MIPS静态汇编审计辅助脚本。

可能会有bug，欢迎大家完善。

功能

辅助脚本功能如下：

  1. 找到危险函数的调用处，并且高亮该行（也可以下断点,这个需要自己去源码看吧）

  2. 给参数赋值处加上注释

  3. 最后以表格的形式输出函数名，调用地址，参数，还有当前函数的缓冲区大小

大家双击addr那一列的地址，即可跳到对应的地址处

17cc62c98820974f8c759dc086dd5acb

28069d48cf3f357dd83e42406e10d980

审计的危险函数如下

dangerous_functions = [
    "strcpy", 
    "strcat",  
    "sprintf",
    "read", 
    "getenv"    
]

attention_function = [
    "memcpy",
    "strncpy",
    "sscanf", 
    "strncat", 
    "snprintf",
    "vprintf", 
    "printf"
]

command_execution_function = [
    "system", 
    "execve",
    "popen",
    "unlink"
]

使用

File - Script file

1561006651468

选择mipsAudit.py

1561006737134

即可看到效果

mipsAudit

双击地址即可跳到对应的代码处

1561006887117

mipsaudit's People

Contributors

giantbranch avatar

Stargazers

avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar

Watchers

avatar avatar avatar avatar avatar avatar

Forkers

crackercat happytan555 killvxk fengjixuchui asked637 nr4v3n m1s5p shuixi2013 xunbu7 b0q1 trietptm-on-coding-algorithms snyiu100 bb33bb jack51706 pdkyll e4ck muyeyingyang fans0n-fan t3ls 808cn hhhhu8045759 kittener zengqi0 qianshuidewajueji ohyeah521 harry1080 lornlee newthis orangice1997 c0rn-0x2d1 bgrstar 77clearlove debugpro erebua apachecn isiaon ibuili mwen010

mipsaudit's Issues

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.