mirror of
https://github.com/cea-sec/miasm
synced 2026-08-17 10:26:03 -04:00
34 lines
926 B
Python
34 lines
926 B
Python
from argparse import ArgumentParser
|
|
from miasm.jitter.csts import PAGE_READ, PAGE_WRITE
|
|
from miasm.analysis.machine import Machine
|
|
from miasm.core.locationdb import LocationDB
|
|
|
|
from pdb import pm
|
|
|
|
parser = ArgumentParser(description="x86 32 basic Jitter")
|
|
parser.add_argument("filename", help="x86 32 shellcode filename")
|
|
parser.add_argument("-j", "--jitter",
|
|
help="Jitter engine (default is 'gcc')",
|
|
default="gcc")
|
|
args = parser.parse_args()
|
|
|
|
def code_sentinelle(jitter):
|
|
jitter.running = False
|
|
jitter.pc = 0
|
|
return True
|
|
|
|
loc_db = LocationDB()
|
|
|
|
myjit = Machine("x86_32").jitter(loc_db, args.jitter)
|
|
myjit.init_stack()
|
|
|
|
data = open(args.filename, 'rb').read()
|
|
run_addr = 0x40000000
|
|
myjit.vm.add_memory_page(run_addr, PAGE_READ | PAGE_WRITE, data)
|
|
|
|
myjit.set_trace_log()
|
|
myjit.push_uint32_t(0x1337beef)
|
|
|
|
myjit.add_breakpoint(0x1337beef, code_sentinelle)
|
|
|
|
myjit.run(run_addr)
|