https://github.com/cseagle/freedom

capstone based disassembler for extracting to binnavi
https://github.com/cseagle/freedom

Last synced: about 2 months ago
JSON representation

capstone based disassembler for extracting to binnavi

• Host: GitHub
• URL: https://github.com/cseagle/freedom
• Owner: cseagle
• License: gpl-2.0
• Created: 2015-12-17T18:44:30.000Z (almost 9 years ago)
• Default Branch: master
• Last Pushed: 2016-06-08T08:45:39.000Z (over 8 years ago)
• Last Synced: 2024-02-15T10:33:04.155Z (8 months ago)
• Language: PLpgSQL
• Size: 67.4 KB
• Stars: 225
• Watchers: 24
• Forks: 30
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
fREedom is a primitive attempt to provide an IDA Pro independent means

of extracting disassembly information from executables for use with

binnavi (https://github.com/google/binnavi).

WARNING: This software is in its infancy

Background: binnavi is a graphical "binary navigator" useful for reverse

engineering software. binnavi does not contain its own disassembler, instead

relying upon the capabilities of the commercial disassembler, IDA Pro.

binnavi ships with an IDA plugin that extracts required information from an

existing IDA database into a set of binnavi compatible, Postgres tables. The

amount of work that IDA does on behalf of binnavi is not trivial. There is 

a reason there are no open source competitors to IDA. Eliminating binnavi's

dependency on IDA is not quite as trivial as slapping some glue code on top

of a disassembly framework like Capstone (http://www.capstone-engine.org/)

and calling it a day. This project takes some small steps in that direction.

it is thrown together, not well thought out, and it has a long way to go.

Basic use:  

* Use the provided postgres script to setup the initial postgres database.

* Configure your postgres instance appropriately (pg_hba.conf ...)

* `python fREedom.py --database=my_binnavi --user=someone --pass=itsasecret --dbhost=127.0.0.1 --binary=foo.exe`

* Launch binnavi to browse foo.exe

What's here:   

* binnavi's postgres script to build the required Postgres database

* Python scripts to extract from PE32, PE32+, and ELF binaries containing

x86 or x86_64 code. 

What's not here:  

* A Postgres tutorial (see http://www.postgresql.org/). Among other things,

you'll need psycopg2.

* A Capstone installation tutorial (see http://www.capstone-engine.org/)

* Support for anything other than PE32, PE32+, and ELF

* Support for anything other than x86 and x86_64

Limitations:  

* fREedom's disassembly engine is not as thorough as IDA's, lacking many of

the heuristics that IDA uses to identify code.

* There is currently no support for known data types and library function

signatures. binnavi's type system is complex and not well documented.

Substantial effort will be required to process development header files from

many platforms in order to incorporate this information into fREedom generated

disassemblies.

* Parsers (crude at best) are included for only PE32, PE32+, and ELF.

* Disassembly generators are included for only x86 and x86_64.

* My python skills are not good.