JoYo
/
scrap-is-not-scrap
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

capstone isn't disassembling the whole block, dumb heuristics for growth

master
JoYo 2019-02-24 06:34:26 +00:00
parent 0b709669b0
commit ad6277c0ee
1 changed files with 9 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
sins/mutation.py
View File

@ -55,13 +55,18 @@ def generation(queue: Queue, shellcode: bytes):
def growth(*, shellcode: bytes, length: int) -> bytes: def growth(*, shellcode: bytes, length: int) -> bytes:
for mnemonic, op_str in disasm(shellcode):
if mnemonic == 'nop':
return bytes(shellcode)
if length <= len(shellcode): if length <= len(shellcode):
return bytes(shellcode) return bytes(shellcode)
opcodes = disasm(shellcode)
if len(shellcode) > len(opcodes) * 8:
return bytes(shellcode)
for mnemonic, op_str in opcodes:
if mnemonic == 'nop':
return bytes(shellcode)
shellcode = bytearray(shellcode) shellcode = bytearray(shellcode)
shellcode += b'\x90' shellcode += b'\x90'