mirror of
https://github.com/angr/angr
synced 2026-08-17 12:23:11 -04:00
f939c5b88c
* Enable ruff isort rule * [pre-commit.ci] auto fixes from pre-commit.com hooks for more information, see https://pre-commit.ci --------- Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>
50 lines
1.5 KiB
Python
50 lines
1.5 KiB
Python
#!/usr/bin/env python3
|
|
# pylint: disable=missing-class-docstring,disable=no-self-use
|
|
from __future__ import annotations
|
|
|
|
__package__ = __package__ or "tests.analyses" # pylint:disable=redefined-builtin
|
|
|
|
|
|
import os.path
|
|
from unittest import TestCase, main
|
|
|
|
import angr
|
|
from tests.common import bin_location, skip
|
|
|
|
|
|
class TestDeobfuscation(TestCase):
|
|
@skip
|
|
def test_obfuscation_detection_c427(self):
|
|
# the binary is not available in the public binaries repo
|
|
binary_path = os.path.join(
|
|
bin_location,
|
|
"tests",
|
|
"x86_64",
|
|
"windows",
|
|
"c4270d3a385f54ef44f1b7ac7f02b031f977934a566e8fcef0adfabade1daad3.sys",
|
|
)
|
|
proj = angr.Project(binary_path, auto_load_libs=False)
|
|
cfg = proj.analyses.CFG(force_smart_scan=False, force_complete_scan=False)
|
|
|
|
pd = proj.analyses.ObfuscationDetector(cfg=cfg.model)
|
|
assert pd.obfuscated is True
|
|
assert pd.possible_obfuscators == ["vmprotect"]
|
|
|
|
def test_obfuscation_detection_vmprotect_project1(self):
|
|
binary_path = os.path.join(
|
|
bin_location,
|
|
"tests",
|
|
"x86_64",
|
|
"windows",
|
|
"Project1.vmp.exe",
|
|
)
|
|
proj = angr.Project(binary_path, auto_load_libs=False)
|
|
cfg = proj.analyses.CFG(force_smart_scan=False, force_complete_scan=False)
|
|
|
|
pd = proj.analyses.ObfuscationDetector(cfg=cfg.model)
|
|
assert pd.obfuscated is True
|
|
assert pd.possible_obfuscators == ["vmprotect"]
|
|
|
|
|
|
if __name__ == "__main__":
|
|
main()
|