348 lines
6.2 KiB
Text
348 lines
6.2 KiB
Text
NAME=seekop
|
|
FILE=bins//mach0/ired-arm64
|
|
CMDS=<<EOF
|
|
s
|
|
so +3
|
|
s
|
|
so -3
|
|
s
|
|
so +2
|
|
s
|
|
so -2
|
|
s
|
|
EOF
|
|
EXPECT=<<EOF
|
|
0x100005864
|
|
0x100005870
|
|
0x100005864
|
|
0x10000586c
|
|
0x100005864
|
|
EOF
|
|
RUN
|
|
|
|
NAME=s0x
|
|
FILE==
|
|
CMDS=<<EOF
|
|
s 0x33
|
|
s
|
|
EOF
|
|
EXPECT=<<EOF
|
|
0x33
|
|
EOF
|
|
RUN
|
|
|
|
NAME=seek far offset
|
|
FILE==
|
|
CMDS=<<EOF
|
|
s 0x7fffff8000b54000 ; %v $$
|
|
s 0x8fffff8000b54000 ; %v $$
|
|
EOF
|
|
EXPECT=<<EOF
|
|
0x7fffff8000b54000
|
|
0x8fffff8000b54000
|
|
EOF
|
|
RUN
|
|
|
|
NAME=seek math (symbol addition)
|
|
FILE=bins/elf/analysis/hello-linux-x86_64
|
|
CMDS=<<EOF
|
|
s sym._start + 8
|
|
s
|
|
EOF
|
|
EXPECT=<<EOF
|
|
0x400418
|
|
EOF
|
|
RUN
|
|
|
|
NAME=seek opcodes
|
|
FILE==
|
|
CMDS=<<EOF
|
|
e asm.arch=x86
|
|
e asm.bits=64
|
|
wx 4883c668
|
|
s 0; so ; %v $$
|
|
s 0; so 1 ; %v $$
|
|
EOF
|
|
EXPECT=<<EOF
|
|
0x4
|
|
0x4
|
|
EOF
|
|
RUN
|
|
|
|
NAME=seek local flag
|
|
FILE=bins/elf/analysis/main
|
|
CMDS=<<EOF
|
|
af@ main
|
|
f. foo @ main+4
|
|
s main+.foo
|
|
s
|
|
s main+.foo
|
|
s
|
|
EOF
|
|
EXPECT=<<EOF
|
|
0x40050a
|
|
0x40050a
|
|
EOF
|
|
RUN
|
|
|
|
NAME=Redodups
|
|
FILE=malloc://512
|
|
CMDS=<<EOF
|
|
s $$
|
|
s $$
|
|
s $$
|
|
s $$
|
|
sh*~?
|
|
EOF
|
|
EXPECT=<<EOF
|
|
1
|
|
EOF
|
|
RUN
|
|
|
|
NAME=seek backwards
|
|
FILE=malloc://0x4000
|
|
CMDS=<<EOF
|
|
s 0
|
|
b 64
|
|
wb 38
|
|
s 64
|
|
wb deadbeef
|
|
sd -32
|
|
px
|
|
EOF
|
|
EXPECT=<<EOF
|
|
- offset - 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF
|
|
0x00000020 3838 3838 3838 3838 3838 3838 3838 3838 8888888888888888
|
|
0x00000030 3838 3838 3838 3838 3838 3838 3838 3838 8888888888888888
|
|
0x00000040 dead beef dead beef dead beef dead beef ................
|
|
0x00000050 dead beef dead beef dead beef dead beef ................
|
|
EOF
|
|
RUN
|
|
|
|
NAME=seek silent
|
|
FILE==
|
|
CMDS=<<EOF
|
|
s 0x100
|
|
s
|
|
sh*
|
|
echo
|
|
s 0x200
|
|
s
|
|
sh*
|
|
echo
|
|
s 0x300 @e:cfg.seek.silent=true
|
|
s
|
|
sh*
|
|
EOF
|
|
EXPECT=<<EOF
|
|
0x100
|
|
f undo_0 @ 0x0
|
|
# Current seek @ 0x100
|
|
|
|
0x200
|
|
f undo_1 @ 0x0
|
|
f undo_0 @ 0x100
|
|
# Current seek @ 0x200
|
|
|
|
0x300
|
|
f undo_1 @ 0x0
|
|
f undo_0 @ 0x100
|
|
# Current seek @ 0x300
|
|
EOF
|
|
RUN
|
|
|
|
NAME=seek silent to register
|
|
FILE==
|
|
CMDS=<<EOF
|
|
e asm.arch=x86
|
|
e asm.bits=32
|
|
ar eax=0x200
|
|
ar ebx=0x300
|
|
s 0x100
|
|
s
|
|
sh*
|
|
echo
|
|
sr eax
|
|
s
|
|
sh*
|
|
echo
|
|
sr ebx @e:cfg.seek.silent=true
|
|
s
|
|
sh*
|
|
EOF
|
|
EXPECT=<<EOF
|
|
0x100
|
|
f undo_0 @ 0x0
|
|
# Current seek @ 0x100
|
|
|
|
0x200
|
|
f undo_1 @ 0x0
|
|
f undo_0 @ 0x100
|
|
# Current seek @ 0x200
|
|
|
|
0x300
|
|
f undo_1 @ 0x0
|
|
f undo_0 @ 0x100
|
|
# Current seek @ 0x300
|
|
EOF
|
|
RUN
|
|
|
|
NAME=so -N, pd -N
|
|
FILE=bins/pe/cmd_adf_sample0.exe
|
|
CMDS=<<EOF
|
|
(test_so_pd addr; e asm.bytes=true; echo; echo --- From ${addr} ---; echo; echo -- 1 --; s ${addr}; pd -1; so -1; s; pd 1; echo; echo -- 2 --; s ${addr}; pd -2; so -2; s; pd 2)
|
|
.(test_so_pd 0x0) # Special case
|
|
.(test_so_pd 0x401000)
|
|
s 0x560e67
|
|
af
|
|
.(test_so_pd 0x560e7d)
|
|
.(test_so_pd 0x560e7c)
|
|
.(test_so_pd 0x560e7a)
|
|
.(test_so_pd 0x560e79)
|
|
.(test_so_pd 0x560e97)
|
|
.(test_so_pd 0x560e96)
|
|
EOF
|
|
EXPECT=<<EOF
|
|
|
|
--- From 0x0 ---
|
|
|
|
-- 1 --
|
|
0x00000000 ff invalid
|
|
0x0
|
|
0x00000000 ff invalid
|
|
|
|
-- 2 --
|
|
0x00000000 ff invalid
|
|
0x00000001 ff invalid
|
|
0x0
|
|
0x00000000 ff invalid
|
|
0x00000001 ff invalid
|
|
|
|
--- From 0x401000 ---
|
|
|
|
-- 1 --
|
|
0x00400ffe 0000 add byte [eax], al
|
|
0x400ffe
|
|
0x00400ffe 0000 add byte [eax], al
|
|
|
|
-- 2 --
|
|
0x00400ffc 0000 add byte [eax], al
|
|
0x00400ffe 0000 add byte [eax], al
|
|
0x400ffc
|
|
0x00400ffc 0000 add byte [eax], al
|
|
0x00400ffe 0000 add byte [eax], al
|
|
|
|
--- From 0x560e7d ---
|
|
|
|
-- 1 --
|
|
0x00560e7a ~ 0085965e5052 add byte [ebp + 0x52505e96], al
|
|
0x560e7a
|
|
0x00560e7a ~ 0085965e5052 add byte [ebp + 0x52505e96], al
|
|
|
|
-- 2 --
|
|
0x00560e78 d41b aam 0x1b
|
|
0x00560e7a ~ 0085965e5052 add byte [ebp + 0x52505e96], al
|
|
0x560e78
|
|
0x00560e78 d41b aam 0x1b
|
|
0x00560e7a ~ 0085965e5052 add byte [ebp + 0x52505e96], al
|
|
|
|
--- From 0x560e7c ---
|
|
|
|
-- 1 --
|
|
0x00560e7a ~ 0085965e5052 add byte [ebp + 0x52505e96], al
|
|
0x560e7a
|
|
0x00560e7a ~ 0085965e5052 add byte [ebp + 0x52505e96], al
|
|
|
|
-- 2 --
|
|
0x00560e78 d41b aam 0x1b
|
|
0x00560e7a ~ 0085965e5052 add byte [ebp + 0x52505e96], al
|
|
0x560e78
|
|
0x00560e78 d41b aam 0x1b
|
|
0x00560e7a ~ 0085965e5052 add byte [ebp + 0x52505e96], al
|
|
|
|
--- From 0x560e7a ---
|
|
|
|
-- 1 --
|
|
0x00560e78 d41b aam 0x1b
|
|
0x560e78
|
|
0x00560e78 d41b aam 0x1b
|
|
|
|
-- 2 --
|
|
0x00560e76 3bd4 cmp edx, esp
|
|
0x00560e78 d41b aam 0x1b
|
|
0x560e76
|
|
0x00560e76 3bd4 cmp edx, esp
|
|
0x00560e78 d41b aam 0x1b
|
|
|
|
--- From 0x560e79 ---
|
|
|
|
-- 1 --
|
|
0x00560e78 d41b aam 0x1b
|
|
0x560e78
|
|
0x00560e78 d41b aam 0x1b
|
|
|
|
-- 2 --
|
|
0x00560e76 3bd4 cmp edx, esp
|
|
0x00560e78 d41b aam 0x1b
|
|
0x560e76
|
|
0x00560e76 3bd4 cmp edx, esp
|
|
0x00560e78 d41b aam 0x1b
|
|
|
|
--- From 0x560e97 ---
|
|
|
|
-- 1 --
|
|
| ; CODE XREF from fcn.00560e67 @ 0x560e80
|
|
| 0x00560e96 0f31 rdtsc
|
|
0x560e96
|
|
| ; CODE XREF from fcn.00560e67 @ 0x560e80
|
|
| 0x00560e96 0f31 rdtsc
|
|
|
|
-- 2 --
|
|
0x00560e95 ~ ba0f31e914 mov edx, 0x14e9310f
|
|
| ; CODE XREF from fcn.00560e67 @ 0x560e80
|
|
| 0x00560e96 0f31 rdtsc
|
|
0x560e95
|
|
0x00560e95 ~ ba0f31e914 mov edx, 0x14e9310f
|
|
| ; CODE XREF from fcn.00560e67 @ 0x560e80
|
|
| 0x00560e96 0f31 rdtsc
|
|
|
|
--- From 0x560e96 ---
|
|
|
|
-- 1 --
|
|
0x00560e95 ~ ba0f31e914 mov edx, 0x14e9310f
|
|
0x560e95
|
|
0x00560e95 ~ ba0f31e914 mov edx, 0x14e9310f
|
|
|
|
-- 2 --
|
|
0x00560e94 9e sahf
|
|
0x00560e95 ~ ba0f31e914 mov edx, 0x14e9310f
|
|
0x560e94
|
|
0x00560e94 9e sahf
|
|
0x00560e95 ~ ba0f31e914 mov edx, 0x14e9310f
|
|
EOF
|
|
RUN
|
|
|
|
NAME=relative tmp seek
|
|
FILE==
|
|
CMDS=<<EOF
|
|
s 0x10
|
|
%v $$ @ +0x10
|
|
EOF
|
|
EXPECT=<<EOF
|
|
0x20
|
|
EOF
|
|
RUN
|
|
|
|
NAME=seek to bb start (sb)
|
|
FILE=bins/elf/vim
|
|
CMDS=<<EOF
|
|
s 0x543a0
|
|
af
|
|
sd +3
|
|
sb
|
|
%v $$
|
|
EOF
|
|
EXPECT=<<EOF
|
|
0x543a0
|
|
EOF
|
|
RUN
|