[原创] 用angr去除o-llvm控制流平坦化-iOS安全-看雪-安全社区|安全招聘|kanxue.com

[原创] 用angr去除o-llvm控制流平坦化

发表于: 2018-1-2 15:30 5815

[原创] 用angr去除o-llvm控制流平坦化

liumengde

2018-1-2 15:30

5815

更改这篇文章中最新版本的bug 037K9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6K6k6h3y4#2M7X3W2@1P5g2)9J5k6i4c8W2L8X3y4W2L8Y4c8Q4x3X3g2U0L8$3#2Q4x3V1k6A6L8X3c8W2P5q4)9J5k6i4m8Z5M7q4)9J5c8X3u0D9L8$3N6Q4x3V1k6E0M7$3N6Q4x3V1j5I4x3e0t1`. 和补充这篇文章的环境搭建

1.配置mac中docker环境

（1）下载 fe9K9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6V1L8%4N6F1L8r3!0S2k6q4)9J5k6h3c8G2j5$3E0W2M7W2)9J5k6h3y4G2L8g2)9J5c8X3#2S2j5#2)9J5c8Y4y4@1j5h3u0D9k6g2)9J5c8V1c8G2j5$3E0W2M7W2)9J5k6h3c8E0k6H3`.`.
（2）可以按照这篇文章中传mac到docker文件 04bK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3u0D9L8$3N6Q4x3X3g2U0M7$3c8F1i4K6u0W2L8X3g2@1i4K6u0r3P5s2c8X3k6$3f1H3z5e0p5#2i4K6u0r3j5i4u0@1K9h3y4D9k6g2)9J5c8X3c8W2N6r3q4A6L8s2y4Q4x3V1j5#2x3U0p5$3z5e0b7@1y4b7`.`.

（3）安装docker环境中的angr 39eK9s2c8@1M7s2y4Q4x3@1q4Q4x3V1k6Q4x3V1k6V1L8$3y4K6i4K6u0W2j5h3&6Y4M7W2)9J5k6h3W2G2i4K6u0r3d9f1&6e0g2p5q4x3e0q4)9J5k6h3S2@1L8h3I4Q4x3U0k6F1j5Y4y4H3i4K6y4n7 但是注意不用第一步 1.sudo docker pull angr/angr 2.sudo docker run -it angr/angr

2.原文如下

p.step()

while p.successors[0].addr not in relevants:

p = p.successors[0]

p.step()

return p.successors[0].addr

在2017 年9月份 angr已经升级它会出现 while p.successors[0].addr not in relevants: File "/Library/Python/2.7/site-packages/angr-7.7.12.16-py2.7.egg/angr/sim_state.py", line 201, in getattr raise AttributeError(v) AttributeError: successors 这个错误

。

3.更改为

succ=p.step()

while succ.successors[0].addr not in relevants:

# p = succ.successors[0]

succ=succ.successors[0].step()

return succ.successors[0].addr

[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课

收藏・1

免费・0

支持