Tso tawm lub moj khaum rau kev rov qab engineering Rizin 0.4.0 thiab GUI Cutter 2.1.0

Kev tso tawm ntawm lub moj khaum rau thim rov qab engineering Rizin thiab cov duab sib txuas graphical plhaub Cutter tau tshwm sim. Lub phiaj xwm Rizin tau pib ua ib rab diav rawg ntawm Radare2 lub moj khaum thiab txuas ntxiv nws txoj kev txhim kho nrog rau qhov tseem ceeb ntawm API yooj yim thiab tsom mus rau kev txheeb xyuas cov cai yam tsis muaj forensics. Txij li lub diav rawg, qhov project tau hloov mus rau qhov sib txawv ntawm cov txheej txheem rau kev txuag cov ntu ("cov phiaj xwm") hauv daim ntawv ntawm lub xeev raws li kev sib tw. Tsis tas li ntawd, lub hauv paus code tau raug kho dua tshiab kom nws tswj tau ntau dua. Txoj haujlwm code yog sau hauv C thiab muab faib raws li daim ntawv tso cai LGPLv3.

Lub Cutter graphical plhaub tau sau rau hauv C ++ siv Qt thiab muab faib raws li daim ntawv tso cai GPLv3. Cutter, zoo li Rizin nws tus kheej, yog tsom rau cov txheej txheem rov qab engineering cov kev pab cuam hauv tshuab code lossis bytecode (piv txwv li JVM lossis PYC). Muaj decompilation plugins rau Cutter / Rizin raws li Ghidra, JSdec thiab RetDec.

Tso tawm lub moj khaum rau kev rov qab engineering Rizin 0.4.0 thiab GUI Cutter 2.1.0

Hauv qhov kev tso tawm tshiab:

  • Ntxiv kev txhawb nqa rau tsim FLIRT kos npe, uas tuaj yeem thauj mus rau hauv IDA Pro;
  • Cov pob muaj xws li cov ntaub ntawv ntawm tus qauv kos npe rau cov tsev qiv ntawv nrov;
  • Txhim kho kev paub txog kev ua haujlwm thiab kab ntawm cov ntaub ntawv ua tau zoo hauv Go rau x86/x64/PowerPC/MIPS/ARM/RISC-V;
  • Ib hom lus tshiab nruab nrab nruab nrab RzIL raws li BAP Core Theory (SMT-zoo li lus) tau raug coj los siv;
  • Ntxiv lub peev xwm los pib-nrhiav qhov chaw nyob rau "raw" cov ntaub ntawv;
  • Kev them nyiaj yug rau kev thauj khoom nco "snapshots" raws li Windows PageDump / Minidump hom ntawv hauv hom kev debug tau ua tiav;
  • Txhim kho kev ua haujlwm nrog cov chaw taws teeb debuggers raws li WinDbg/KD.
  • Tam sim no, kev txhawb nqa rau ARMv7 / ARMv8, AVR, 6052, brainfuck architectures tau raug xa mus rau RzIL tshiab. Los ntawm kev tso tawm tom ntej nws tau npaj ua kom tiav cov kev txhais lus rau SuperH, PowerPC thiab ib nrab x86.

Kuj tseem tso tawm:

  • rz-libyara - plugin rau Rizin / Cutter los txhawb kev thauj khoom thiab tsim kos npe hauv Yara hom;
  • rz-libdemangle – muaj nuj nqi lub npe decoding tsev qiv ntawv rau C ++/ObjC/Xeb/Swift/Java lus;
  • rz-ghidra – plugin rau Rizin/Cutter rau decompilation (raws li Ghidra C ++ code);
  • jsdec – plugin rau Rizin/Cutter rau decompiling tus thawj txoj kev loj hlob;
  • rz-retdec – plugin rau Rizin/Cutter rau decompilation (raws li RetDec);
  • rz-tracetest - qhov khoom siv rau kev kuaj xyuas qhov tseeb ntawm kev txhais lus ntawm lub tshuab code rau hauv RzIL los ntawm kev sib piv nrog cov kab emulation (raws li QEMU, VICE).

Tau qhov twg los: opennet.ru

Ntxiv ib saib