3c2e4bf63a
* Show group-level details of commands Details can be defined at either a group command or its subcommand of the same name. If define on group-level it will also be shown in the group help without needing ??. * Fix > $ redirection for errored command and leak * Rewrite ar and dr commands with newshell Breaking changes: ar* => arf, ar- => arf-, ar. => ar* ar, => art, ar? => arq ar0 => ara0, arb => arab, ars => araS arC => arpC arn => arR art => arT arf => arF Removed: drm, aer
348 lines
6.1 KiB
Text
348 lines
6.1 KiB
Text
NAME=seekop
|
|
FILE=bins//mach0/ired-arm64
|
|
CMDS=<<EOF
|
|
s
|
|
so +3
|
|
s
|
|
so -3
|
|
s
|
|
so +2
|
|
s
|
|
so -2
|
|
s
|
|
EOF
|
|
EXPECT=<<EOF
|
|
0x100005864
|
|
0x100005870
|
|
0x100005864
|
|
0x10000586c
|
|
0x100005864
|
|
EOF
|
|
RUN
|
|
|
|
NAME=s0x
|
|
FILE==
|
|
CMDS=<<EOF
|
|
s 0x33
|
|
s
|
|
EOF
|
|
EXPECT=<<EOF
|
|
0x33
|
|
EOF
|
|
RUN
|
|
|
|
NAME=seek far offset
|
|
FILE==
|
|
CMDS=<<EOF
|
|
s 0x7fffff8000b54000 ; ?v $$
|
|
s 0x8fffff8000b54000 ; ?v $$
|
|
EOF
|
|
EXPECT=<<EOF
|
|
0x7fffff8000b54000
|
|
0x8fffff8000b54000
|
|
EOF
|
|
RUN
|
|
|
|
NAME=seek math (symbol addition)
|
|
FILE=bins/elf/analysis/hello-linux-x86_64
|
|
CMDS=<<EOF
|
|
s sym._start + 8
|
|
s
|
|
EOF
|
|
EXPECT=<<EOF
|
|
0x400418
|
|
EOF
|
|
RUN
|
|
|
|
NAME=seek opcodes
|
|
FILE==
|
|
CMDS=<<EOF
|
|
e asm.arch=x86
|
|
e asm.bits=64
|
|
wx 4883c668
|
|
s 0; so ; ?v $$
|
|
s 0; so 1 ; ?v $$
|
|
EOF
|
|
EXPECT=<<EOF
|
|
0x4
|
|
0x4
|
|
EOF
|
|
RUN
|
|
|
|
NAME=seek local flag
|
|
FILE=bins/elf/analysis/main
|
|
CMDS=<<EOF
|
|
af@ main
|
|
f.foo@ main+4
|
|
s main+.foo
|
|
s
|
|
s main+.foo
|
|
s
|
|
EOF
|
|
EXPECT=<<EOF
|
|
0x40050a
|
|
0x40050a
|
|
EOF
|
|
RUN
|
|
|
|
NAME=Redodups
|
|
FILE=malloc://512
|
|
CMDS=<<EOF
|
|
s $$
|
|
s $$
|
|
s $$
|
|
s $$
|
|
sh*~?
|
|
EOF
|
|
EXPECT=<<EOF
|
|
1
|
|
EOF
|
|
RUN
|
|
|
|
NAME=seek backwards
|
|
FILE=malloc://0x4000
|
|
CMDS=<<EOF
|
|
s 0
|
|
b 64
|
|
wb 38
|
|
s 64
|
|
wb deadbeef
|
|
sd -32
|
|
px
|
|
EOF
|
|
EXPECT=<<EOF
|
|
- offset - 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF
|
|
0x00000020 3838 3838 3838 3838 3838 3838 3838 3838 8888888888888888
|
|
0x00000030 3838 3838 3838 3838 3838 3838 3838 3838 8888888888888888
|
|
0x00000040 dead beef dead beef dead beef dead beef ................
|
|
0x00000050 dead beef dead beef dead beef dead beef ................
|
|
EOF
|
|
RUN
|
|
|
|
NAME=seek silent
|
|
FILE==
|
|
CMDS=<<EOF
|
|
s 0x100
|
|
s
|
|
sh*
|
|
?e
|
|
s 0x200
|
|
s
|
|
sh*
|
|
?e
|
|
s 0x300 @e:cfg.seek.silent=true
|
|
s
|
|
sh*
|
|
EOF
|
|
EXPECT=<<EOF
|
|
0x100
|
|
f undo_0 @ 0x0
|
|
# Current seek @ 0x100
|
|
|
|
0x200
|
|
f undo_1 @ 0x0
|
|
f undo_0 @ 0x100
|
|
# Current seek @ 0x200
|
|
|
|
0x300
|
|
f undo_1 @ 0x0
|
|
f undo_0 @ 0x100
|
|
# Current seek @ 0x300
|
|
EOF
|
|
RUN
|
|
|
|
NAME=seek silent to register
|
|
FILE==
|
|
CMDS=<<EOF
|
|
e asm.arch=x86
|
|
e asm.bits=32
|
|
ar eax=0x200
|
|
ar ebx=0x300
|
|
s 0x100
|
|
s
|
|
sh*
|
|
?e
|
|
sr eax
|
|
s
|
|
sh*
|
|
?e
|
|
sr ebx @e:cfg.seek.silent=true
|
|
s
|
|
sh*
|
|
EOF
|
|
EXPECT=<<EOF
|
|
0x100
|
|
f undo_0 @ 0x0
|
|
# Current seek @ 0x100
|
|
|
|
0x200
|
|
f undo_1 @ 0x0
|
|
f undo_0 @ 0x100
|
|
# Current seek @ 0x200
|
|
|
|
0x300
|
|
f undo_1 @ 0x0
|
|
f undo_0 @ 0x100
|
|
# Current seek @ 0x300
|
|
EOF
|
|
RUN
|
|
|
|
NAME=so -N, pd -N
|
|
FILE=bins/pe/cmd_adf_sample0.exe
|
|
CMDS=<<EOF
|
|
"(test_so_pd addr; e asm.bytes=true; ?e; ?e --- From $0 ---; ?e; ?e -- 1 --; s $0; pd -1; so -1; s; pd 1; ?e; ?e -- 2 --; s $0; pd -2; so -2; s; pd 2)"
|
|
.(test_so_pd 0x0) # Special case
|
|
.(test_so_pd 0x401000)
|
|
s 0x560e67
|
|
af
|
|
.(test_so_pd 0x560e7d)
|
|
.(test_so_pd 0x560e7c)
|
|
.(test_so_pd 0x560e7a)
|
|
.(test_so_pd 0x560e79)
|
|
.(test_so_pd 0x560e97)
|
|
.(test_so_pd 0x560e96)
|
|
EOF
|
|
EXPECT=<<EOF
|
|
|
|
--- From 0x0 ---
|
|
|
|
-- 1 --
|
|
0x00000000 ff invalid
|
|
0x0
|
|
0x00000000 ff invalid
|
|
|
|
-- 2 --
|
|
0x00000000 ff invalid
|
|
0x00000001 ff invalid
|
|
0x0
|
|
0x00000000 ff invalid
|
|
0x00000001 ff invalid
|
|
|
|
--- From 0x401000 ---
|
|
|
|
-- 1 --
|
|
0x00400fff ~ ffcc dec esp
|
|
0x400fff
|
|
0x00400fff ~ ffcc dec esp
|
|
|
|
-- 2 --
|
|
0x00400ffe ff invalid
|
|
0x00400fff ~ ffcc dec esp
|
|
0x400ffe
|
|
0x00400ffe ff invalid
|
|
0x00400fff ~ ffcc dec esp
|
|
|
|
--- From 0x560e7d ---
|
|
|
|
-- 1 --
|
|
0x00560e7a ~ 0085965e5052 add byte [ebp + 0x52505e96], al
|
|
0x560e7a
|
|
0x00560e7a ~ 0085965e5052 add byte [ebp + 0x52505e96], al
|
|
|
|
-- 2 --
|
|
0x00560e78 d41b aam 0x1b
|
|
0x00560e7a ~ 0085965e5052 add byte [ebp + 0x52505e96], al
|
|
0x560e78
|
|
0x00560e78 d41b aam 0x1b
|
|
0x00560e7a ~ 0085965e5052 add byte [ebp + 0x52505e96], al
|
|
|
|
--- From 0x560e7c ---
|
|
|
|
-- 1 --
|
|
0x00560e7a ~ 0085965e5052 add byte [ebp + 0x52505e96], al
|
|
0x560e7a
|
|
0x00560e7a ~ 0085965e5052 add byte [ebp + 0x52505e96], al
|
|
|
|
-- 2 --
|
|
0x00560e78 d41b aam 0x1b
|
|
0x00560e7a ~ 0085965e5052 add byte [ebp + 0x52505e96], al
|
|
0x560e78
|
|
0x00560e78 d41b aam 0x1b
|
|
0x00560e7a ~ 0085965e5052 add byte [ebp + 0x52505e96], al
|
|
|
|
--- From 0x560e7a ---
|
|
|
|
-- 1 --
|
|
0x00560e78 d41b aam 0x1b
|
|
0x560e78
|
|
0x00560e78 d41b aam 0x1b
|
|
|
|
-- 2 --
|
|
0x00560e76 3bd4 cmp edx, esp
|
|
0x00560e78 d41b aam 0x1b
|
|
0x560e76
|
|
0x00560e76 3bd4 cmp edx, esp
|
|
0x00560e78 d41b aam 0x1b
|
|
|
|
--- From 0x560e79 ---
|
|
|
|
-- 1 --
|
|
0x00560e78 d41b aam 0x1b
|
|
0x560e78
|
|
0x00560e78 d41b aam 0x1b
|
|
|
|
-- 2 --
|
|
0x00560e76 3bd4 cmp edx, esp
|
|
0x00560e78 d41b aam 0x1b
|
|
0x560e76
|
|
0x00560e76 3bd4 cmp edx, esp
|
|
0x00560e78 d41b aam 0x1b
|
|
|
|
--- From 0x560e97 ---
|
|
|
|
-- 1 --
|
|
| ; CODE XREF from fcn.00560e67 @ 0x560e80
|
|
| 0x00560e96 0f31 rdtsc
|
|
0x560e96
|
|
| ; CODE XREF from fcn.00560e67 @ 0x560e80
|
|
| 0x00560e96 0f31 rdtsc
|
|
|
|
-- 2 --
|
|
0x00560e95 ~ ba0f31e914 mov edx, 0x14e9310f
|
|
| ; CODE XREF from fcn.00560e67 @ 0x560e80
|
|
| 0x00560e96 0f31 rdtsc
|
|
0x560e95
|
|
0x00560e95 ~ ba0f31e914 mov edx, 0x14e9310f
|
|
| ; CODE XREF from fcn.00560e67 @ 0x560e80
|
|
| 0x00560e96 0f31 rdtsc
|
|
|
|
--- From 0x560e96 ---
|
|
|
|
-- 1 --
|
|
0x00560e95 ~ ba0f31e914 mov edx, 0x14e9310f
|
|
0x560e95
|
|
0x00560e95 ~ ba0f31e914 mov edx, 0x14e9310f
|
|
|
|
-- 2 --
|
|
0x00560e94 9e sahf
|
|
0x00560e95 ~ ba0f31e914 mov edx, 0x14e9310f
|
|
0x560e94
|
|
0x00560e94 9e sahf
|
|
0x00560e95 ~ ba0f31e914 mov edx, 0x14e9310f
|
|
EOF
|
|
RUN
|
|
|
|
NAME=relative tmp seek
|
|
FILE==
|
|
CMDS=<<EOF
|
|
s 0x10
|
|
?v $$ @ +0x10
|
|
EOF
|
|
EXPECT=<<EOF
|
|
0x20
|
|
EOF
|
|
RUN
|
|
|
|
NAME=seek to bb start (sb)
|
|
FILE=bins/elf/vim
|
|
CMDS=<<EOF
|
|
s 0x543a0
|
|
af
|
|
sd +3
|
|
sb
|
|
?v $$
|
|
EOF
|
|
EXPECT=<<EOF
|
|
0x543a0
|
|
EOF
|
|
RUN
|