plasma: an interactive disassembler for x86/ARM/MIPS – Penetration Testing

PLASMA

PLASMA is an interactive disassembler. It can generate a more readable assembly (pseudo code) with colored syntax. You can write scripts with the available Python api (see an example below). The project is still in big development.

wiki : TODO list and some documentation.

It supports :

architectures : x86{64}, ARM, MIPS{64} (partially for ARM and MIPS)

formats : ELF, PE, RAW

Warning: until structures and type definitions are not implemented, the database compatibility could be broken.

Requirements

python >= 3.4

capstone

python-pyelftools

pefile + python3-future

python-msgpack >= 0.4.6

c++filt (available in the binutils Linux package)

terminal should support UTF8 and 256 colors (if not, use the option –nocolor)

Optional :

python-qt4 used for the memory map

keystone for the script asm.py

Installation

git clone http://ift.tt/2vegJVg
cd plasma
./install.sh

Or if you have already installed requirements with the previous command :

./install.sh –update

Check tests:

make
…………………………………………………………………………
84/84 tests passed successfully in 2.777975s
analyzer tests…

Pseudo-decompilation of functions

$ plasma -i tests/server.bin
>> v main
# you can press tab to show the pseudo decompilation
# | to split the window
# See the command help for all shortcuts

Source: http://ift.tt/2iu0fFh

The post plasma: an interactive disassembler for x86/ARM/MIPS appeared first on Penetration Testing.

http://ift.tt/2vetChR http://ift.tt/2aM8QhC

Anúncios

Deixe um comentário

Preencha os seus dados abaixo ou clique em um ícone para log in:

Logotipo do WordPress.com

Você está comentando utilizando sua conta WordPress.com. Sair / Alterar )

Imagem do Twitter

Você está comentando utilizando sua conta Twitter. Sair / Alterar )

Foto do Facebook

Você está comentando utilizando sua conta Facebook. Sair / Alterar )

Foto do Google+

Você está comentando utilizando sua conta Google+. Sair / Alterar )

Conectando a %s