Skip to content

h0rac/bn-plugin

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

54 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Explorer plugin support Linux and OS X

Tested on Ubuntu 18.04 LTS and OS X Catalina

For OS X you don't need to install virtualenv

Symbolic execution for static vulnerability assessment in firmware

SUPPORTED FEATURES

a) Set start/end address of execution
b) Dynamic recognition of numer and type of function params
c) Option to search for buffer overflow
d) Path exploration coloring
e) Set library path and select library to load
f) ROP Chaining
g) ROP Stack
h) Exploit PoC generation to JSON or file

Example base on vulnerability found in IoT device

1) angr should be installed on virtualenv, and binaryninja executed from
2) angr + BN works only on Linux without issues
3) virtualenv require python 3.x
virtualenv -p /usr/bin/python3 angr
change path in binaryninja to point to python3 of your main os

Alt text Alt text Alt text Alt text Alt text Alt text Alt text Alt text Alt text Alt text Alt text Alt text

About

No description, website, or topics provided.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages