Skip to content

Commit

Permalink
Deploying to gh-pages from @ e9bd96e 🚀
Browse files Browse the repository at this point in the history
  • Loading branch information
patacca committed Jun 12, 2024
1 parent 385b3bf commit dae2cad
Show file tree
Hide file tree
Showing 4 changed files with 14 additions and 66 deletions.
24 changes: 5 additions & 19 deletions _sources/tutorials/binexport_quickstart.ipynb.txt
Original file line number Diff line number Diff line change
Expand Up @@ -13,14 +13,8 @@
]
},
{
"cell_type": "code",
"execution_count": null,
"metadata": {
"vscode": {
"languageId": "html"
}
},
"outputs": [],
"cell_type": "raw",
"metadata": {},
"source": [
"<div style=\"text-align: center;\"><a href=\"../_static/tutorials/edimax_practical.tar.gz\"><i class=\"fa fa-download fa-lg\"></i><br/>binary.tar.gz</a></div><br/>"
]
Expand Down Expand Up @@ -83,14 +77,8 @@
]
},
{
"cell_type": "code",
"execution_count": null,
"metadata": {
"vscode": {
"languageId": "html"
}
},
"outputs": [],
"cell_type": "raw",
"metadata": {},
"source": [
"<button type=\"button\" class=\"collapsible\">Show Solution</button>"
]
Expand Down Expand Up @@ -178,14 +166,12 @@
]
},
{
"cell_type": "code",
"execution_count": null,
"cell_type": "raw",
"metadata": {
"vscode": {
"languageId": "html"
}
},
"outputs": [],
"source": [
"<button type=\"button\" class=\"collapsible\">Show Solution</button>"
]
Expand Down
2 changes: 1 addition & 1 deletion searchindex.js

Large diffs are not rendered by default.

30 changes: 3 additions & 27 deletions tutorials/binexport_quickstart.html
Original file line number Diff line number Diff line change
Expand Up @@ -131,15 +131,7 @@ <h1>python-binexport: Quick Start<a class="headerlink" href="#python-binexport:-
<section id="Introduction">
<h2>Introduction<a class="headerlink" href="#Introduction" title="Link to this heading"></a></h2>
<p>The sample to work on has been extracted from the firmware of a edimax router (BR6478AC V2) and it is known to be vulnerable to CVE-2023-49351. It can be downloaded below.</p>
<div class="nbinput nblast docutils container">
<div class="prompt highlight-none notranslate"><div class="highlight"><pre><span></span>[ ]:
</pre></div>
</div>
<div class="input_area highlight-ipython3 notranslate"><div class="highlight"><pre><span></span><span class="o">&lt;</span><span class="n">div</span> <span class="n">style</span><span class="o">=</span><span class="s2">&quot;text-align: center;&quot;</span><span class="o">&gt;&lt;</span><span class="n">a</span> <span class="n">href</span><span class="o">=</span><span class="s2">&quot;../_static/tutorials/edimax_practical.tar.gz&quot;</span><span class="o">&gt;&lt;</span><span class="n">i</span> <span class="n">class</span><span class="o">=</span><span class="s2">&quot;fa fa-download fa-lg&quot;</span><span class="o">&gt;&lt;/</span><span class="n">i</span><span class="o">&gt;&lt;</span><span class="n">br</span><span class="o">/&gt;</span><span class="n">binary</span><span class="o">.</span><span class="n">tar</span><span class="o">.</span><span class="n">gz</span><span class="o">&lt;/</span><span class="n">a</span><span class="o">&gt;&lt;/</span><span class="n">div</span><span class="o">&gt;&lt;</span><span class="n">br</span><span class="o">/&gt;</span>
</pre></div>
</div>
</div>
<p>It’s a MIPS ELF executable that acts as a HTTP server. We are interested in finding all the functions that call a potentially unsafe primitive function (like <code class="docutils literal notranslate"><span class="pre">strcpy</span></code>).</p>
<div style="text-align: center;"><a href="../_static/tutorials/edimax_practical.tar.gz"><i class="fa fa-download fa-lg"></i><br/>binary.tar.gz</a></div><br/><p>It’s a MIPS ELF executable that acts as a HTTP server. We are interested in finding all the functions that call a potentially unsafe primitive function (like <code class="docutils literal notranslate"><span class="pre">strcpy</span></code>).</p>
<p>Let’s use python-binexport to list them.</p>
</section>
<section id="I.-Loading-the-program">
Expand Down Expand Up @@ -170,15 +162,7 @@ <h2>I. Loading the program<a class="headerlink" href="#I.-Loading-the-program" t
<section id="II.-Listing-interesting-functions">
<h2>II. Listing interesting functions<a class="headerlink" href="#II.-Listing-interesting-functions" title="Link to this heading"></a></h2>
<p>We are interested in listing all the functions that call a potentially vulnerable function, like <code class="docutils literal notranslate"><span class="pre">strcpy</span></code> for example. This can be achieved by using the <a class="reference external" href="https://diffing.quarkslab.com/exporter/binexport.html#binexport.function.FunctionBinExport.parents">FunctionBinExport.parents</a> API.</p>
<div class="nbinput nblast docutils container">
<div class="prompt highlight-none notranslate"><div class="highlight"><pre><span></span>[ ]:
</pre></div>
</div>
<div class="input_area highlight-ipython3 notranslate"><div class="highlight"><pre><span></span><span class="o">&lt;</span><span class="n">button</span> <span class="nb">type</span><span class="o">=</span><span class="s2">&quot;button&quot;</span> <span class="n">class</span><span class="o">=</span><span class="s2">&quot;collapsible&quot;</span><span class="o">&gt;</span><span class="n">Show</span> <span class="n">Solution</span><span class="o">&lt;/</span><span class="n">button</span><span class="o">&gt;</span>
</pre></div>
</div>
</div>
<div class="nbinput docutils container">
<button type="button" class="collapsible">Show Solution</button><div class="nbinput docutils container">
<div class="prompt highlight-none notranslate"><div class="highlight"><pre><span></span>[3]:
</pre></div>
</div>
Expand Down Expand Up @@ -254,15 +238,7 @@ <h2>II. Listing interesting functions<a class="headerlink" href="#II.-Listing-in
<section id="III.-Find-interesting-paths-in-the-CG">
<h2>III. Find interesting paths in the CG<a class="headerlink" href="#III.-Find-interesting-paths-in-the-CG" title="Link to this heading"></a></h2>
<p>Now what if we wanted to show the path in the CG (Call Graph) that leads to the execution of one of those functions from <code class="docutils literal notranslate"><span class="pre">main</span></code>?</p>
<div class="nbinput nblast docutils container">
<div class="prompt highlight-none notranslate"><div class="highlight"><pre><span></span>[ ]:
</pre></div>
</div>
<div class="input_area highlight-ipython3 notranslate"><div class="highlight"><pre><span></span><span class="o">&lt;</span><span class="n">button</span> <span class="nb">type</span><span class="o">=</span><span class="s2">&quot;button&quot;</span> <span class="n">class</span><span class="o">=</span><span class="s2">&quot;collapsible&quot;</span><span class="o">&gt;</span><span class="n">Show</span> <span class="n">Solution</span><span class="o">&lt;/</span><span class="n">button</span><span class="o">&gt;</span>
</pre></div>
</div>
</div>
<div class="nbinput docutils container">
<button type="button" class="collapsible">Show Solution</button><div class="nbinput docutils container">
<div class="prompt highlight-none notranslate"><div class="highlight"><pre><span></span>[4]:
</pre></div>
</div>
Expand Down
24 changes: 5 additions & 19 deletions tutorials/binexport_quickstart.ipynb
Original file line number Diff line number Diff line change
Expand Up @@ -13,14 +13,8 @@
]
},
{
"cell_type": "code",
"execution_count": null,
"metadata": {
"vscode": {
"languageId": "html"
}
},
"outputs": [],
"cell_type": "raw",
"metadata": {},
"source": [
"<div style=\"text-align: center;\"><a href=\"../_static/tutorials/edimax_practical.tar.gz\"><i class=\"fa fa-download fa-lg\"></i><br/>binary.tar.gz</a></div><br/>"
]
Expand Down Expand Up @@ -83,14 +77,8 @@
]
},
{
"cell_type": "code",
"execution_count": null,
"metadata": {
"vscode": {
"languageId": "html"
}
},
"outputs": [],
"cell_type": "raw",
"metadata": {},
"source": [
"<button type=\"button\" class=\"collapsible\">Show Solution</button>"
]
Expand Down Expand Up @@ -178,14 +166,12 @@
]
},
{
"cell_type": "code",
"execution_count": null,
"cell_type": "raw",
"metadata": {
"vscode": {
"languageId": "html"
}
},
"outputs": [],
"source": [
"<button type=\"button\" class=\"collapsible\">Show Solution</button>"
]
Expand Down

0 comments on commit dae2cad

Please sign in to comment.