Compare commits
No commits in common. "0b709669b08a459569cd774e31e30d8b83787c04" and "857063da34e975dcfaf133d0fbc3fccf55d6942f" have entirely different histories.
0b709669b0
...
857063da34
|
@ -11,3 +11,4 @@ services:
|
|||
- scraps:/out
|
||||
working_dir: /app
|
||||
command: python3 -m sins -o /out/
|
||||
# command: yasm seed.asm -o seed
|
||||
|
|
|
@ -4,18 +4,10 @@ import json
|
|||
|
||||
capstone = Cs(CS_ARCH_X86, CS_MODE_64)
|
||||
|
||||
def disasm(shellcode: bytes)->list:
|
||||
def disasm(shellcode: bytes)->str:
|
||||
opcodes = list()
|
||||
|
||||
for opcode in capstone.disasm(shellcode, 0):
|
||||
opcodes.append([opcode.mnemonic, opcode.op_str])
|
||||
|
||||
return opcodes
|
||||
|
||||
def objdump(shellcode: bytes)->str:
|
||||
opcodes = str()
|
||||
|
||||
for opcode in capstone.disasm(shellcode, 0):
|
||||
opcodes += f'{opcode.mnemonic} {opcode.op_str}\n'
|
||||
|
||||
return opcodes
|
||||
|
|
|
@ -8,7 +8,7 @@ from sqlalchemy.orm import Session, relationship, backref
|
|||
from sqlalchemy.orm.collections import attribute_mapped_collection
|
||||
import json
|
||||
|
||||
from .disassemble import objdump
|
||||
from .disassemble import disasm
|
||||
|
||||
now = '{0:%Y%m%dT%H%M%S}'.format(datetime.utcnow())
|
||||
Base = declarative_base()
|
||||
|
@ -29,7 +29,7 @@ class ScrapNode(Base):
|
|||
mtime = Column(DateTime, onupdate=datetime.utcnow)
|
||||
parent_id = Column(Integer, ForeignKey(id))
|
||||
checksum = Column(String)
|
||||
objdump = Column(String)
|
||||
disasm = Column(String)
|
||||
image = Column(LargeBinary)
|
||||
|
||||
children = relationship(
|
||||
|
@ -43,17 +43,18 @@ class ScrapNode(Base):
|
|||
self.image = child
|
||||
self.length = len(child)
|
||||
self.sha1sum
|
||||
self.objdump = objdump(child)
|
||||
self.disasm = str(disasm(child))
|
||||
|
||||
def __repr__(self):
|
||||
values = {
|
||||
'checksum': self.checksum,
|
||||
'length': self.length,
|
||||
'disasm': self.disasm,
|
||||
'parent_id': self.parent_id,
|
||||
'id': self.id,
|
||||
}
|
||||
|
||||
return f'{values}\n{self.objdump}'
|
||||
return json.dumps(values, indent=1)
|
||||
|
||||
@property
|
||||
def sha1sum(self):
|
||||
|
|
Loading…
Reference in New Issue