contrast-agent 3.8.4
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +7 -0
- data/.clang-format +5 -0
- data/.dockerignore +10 -0
- data/.gitignore +58 -0
- data/.gitmodules +6 -0
- data/.rspec +6 -0
- data/.simplecov +4 -0
- data/Gemfile +7 -0
- data/LICENSE.txt +12 -0
- data/Rakefile +15 -0
- data/exe/contrast_service +29 -0
- data/ext/build_funchook.rb +48 -0
- data/ext/cs__assess_active_record_named/cs__active_record_named.c +47 -0
- data/ext/cs__assess_active_record_named/cs__active_record_named.h +10 -0
- data/ext/cs__assess_active_record_named/extconf.rb +2 -0
- data/ext/cs__assess_array/cs__assess_array.c +38 -0
- data/ext/cs__assess_array/cs__assess_array.h +9 -0
- data/ext/cs__assess_array/extconf.rb +2 -0
- data/ext/cs__assess_basic_object/cs__assess_basic_object.c +50 -0
- data/ext/cs__assess_basic_object/cs__assess_basic_object.h +17 -0
- data/ext/cs__assess_basic_object/extconf.rb +2 -0
- data/ext/cs__assess_fiber_track/cs__assess_fiber_track.c +86 -0
- data/ext/cs__assess_fiber_track/cs__assess_fiber_track.h +34 -0
- data/ext/cs__assess_fiber_track/extconf.rb +2 -0
- data/ext/cs__assess_hash/cs__assess_hash.c +64 -0
- data/ext/cs__assess_hash/cs__assess_hash.h +24 -0
- data/ext/cs__assess_hash/extconf.rb +2 -0
- data/ext/cs__assess_kernel/cs__assess_kernel.c +36 -0
- data/ext/cs__assess_kernel/cs__assess_kernel.h +10 -0
- data/ext/cs__assess_kernel/extconf.rb +2 -0
- data/ext/cs__assess_marshal_module/cs__assess_marshal_module.c +47 -0
- data/ext/cs__assess_marshal_module/cs__assess_marshal_module.h +18 -0
- data/ext/cs__assess_marshal_module/extconf.rb +2 -0
- data/ext/cs__assess_module/cs__assess_module.c +78 -0
- data/ext/cs__assess_module/cs__assess_module.h +25 -0
- data/ext/cs__assess_module/extconf.rb +2 -0
- data/ext/cs__assess_regexp/cs__assess_regexp.c +48 -0
- data/ext/cs__assess_regexp/cs__assess_regexp.h +22 -0
- data/ext/cs__assess_regexp/extconf.rb +2 -0
- data/ext/cs__assess_regexp_track/cs__assess_regexp_track.c +63 -0
- data/ext/cs__assess_regexp_track/cs__assess_regexp_track.h +29 -0
- data/ext/cs__assess_regexp_track/extconf.rb +2 -0
- data/ext/cs__assess_string/cs__assess_string.c +38 -0
- data/ext/cs__assess_string/cs__assess_string.h +19 -0
- data/ext/cs__assess_string/extconf.rb +2 -0
- data/ext/cs__assess_string_interpolation26/cs__assess_string_interpolation26.c +31 -0
- data/ext/cs__assess_string_interpolation26/cs__assess_string_interpolation26.h +13 -0
- data/ext/cs__assess_string_interpolation26/extconf.rb +2 -0
- data/ext/cs__common/cs__common.c +60 -0
- data/ext/cs__common/cs__common.h +28 -0
- data/ext/cs__common/extconf.rb +20 -0
- data/ext/cs__contrast_patch/cs__contrast_patch.c +445 -0
- data/ext/cs__contrast_patch/cs__contrast_patch.h +196 -0
- data/ext/cs__contrast_patch/extconf.rb +2 -0
- data/ext/cs__protect_kernel/cs__protect_kernel.c +37 -0
- data/ext/cs__protect_kernel/cs__protect_kernel.h +11 -0
- data/ext/cs__protect_kernel/extconf.rb +2 -0
- data/ext/cs__scope/cs__scope.c +96 -0
- data/ext/cs__scope/cs__scope.h +33 -0
- data/ext/cs__scope/extconf.rb +2 -0
- data/ext/extconf_common.rb +49 -0
- data/funchook/LICENSE +360 -0
- data/funchook/Makefile +29 -0
- data/funchook/Makefile.in +29 -0
- data/funchook/README.md +121 -0
- data/funchook/appveyor.yml +42 -0
- data/funchook/autogen.sh +3 -0
- data/funchook/autom4te.cache/output.0 +4976 -0
- data/funchook/autom4te.cache/requests +78 -0
- data/funchook/autom4te.cache/traces.0 +364 -0
- data/funchook/config.guess +1530 -0
- data/funchook/config.log +490 -0
- data/funchook/config.status +1016 -0
- data/funchook/config.sub +1773 -0
- data/funchook/configure +4976 -0
- data/funchook/configure.ac +59 -0
- data/funchook/distorm/COPYING +26 -0
- data/funchook/distorm/MANIFEST +25 -0
- data/funchook/distorm/MANIFEST.in +4 -0
- data/funchook/distorm/README.md +12 -0
- data/funchook/distorm/disOps/disOps.py +795 -0
- data/funchook/distorm/disOps/x86db.py +404 -0
- data/funchook/distorm/disOps/x86header.py +247 -0
- data/funchook/distorm/disOps/x86sets.py +1664 -0
- data/funchook/distorm/examples/cs/TestdiStorm/Program.cs +79 -0
- data/funchook/distorm/examples/cs/TestdiStorm/Properties/AssemblyInfo.cs +36 -0
- data/funchook/distorm/examples/cs/TestdiStorm/TestdiStorm.csproj +69 -0
- data/funchook/distorm/examples/cs/distorm-net.sln +26 -0
- data/funchook/distorm/examples/cs/distorm-net/CodeInfo.cs +23 -0
- data/funchook/distorm/examples/cs/distorm-net/DecodedInst.cs +15 -0
- data/funchook/distorm/examples/cs/distorm-net/DecodedResult.cs +14 -0
- data/funchook/distorm/examples/cs/distorm-net/DecomposedInst.cs +36 -0
- data/funchook/distorm/examples/cs/distorm-net/DecomposedResult.cs +14 -0
- data/funchook/distorm/examples/cs/distorm-net/Opcodes.cs +1268 -0
- data/funchook/distorm/examples/cs/distorm-net/Opcodes.tt +37 -0
- data/funchook/distorm/examples/cs/distorm-net/Operand.cs +25 -0
- data/funchook/distorm/examples/cs/distorm-net/Properties/AssemblyInfo.cs +36 -0
- data/funchook/distorm/examples/cs/distorm-net/diStorm3.cs +411 -0
- data/funchook/distorm/examples/cs/distorm-net/distorm-net.csproj +80 -0
- data/funchook/distorm/examples/cs/readme +3 -0
- data/funchook/distorm/examples/ddk/README +48 -0
- data/funchook/distorm/examples/ddk/distorm.ini +11 -0
- data/funchook/distorm/examples/ddk/dummy.c +15 -0
- data/funchook/distorm/examples/ddk/main.c +91 -0
- data/funchook/distorm/examples/ddk/makefile +1 -0
- data/funchook/distorm/examples/ddk/sources +10 -0
- data/funchook/distorm/examples/java/Makefile +23 -0
- data/funchook/distorm/examples/java/distorm/src/Main.java +43 -0
- data/funchook/distorm/examples/java/distorm/src/diStorm3/CodeInfo.java +27 -0
- data/funchook/distorm/examples/java/distorm/src/diStorm3/DecodedInst.java +32 -0
- data/funchook/distorm/examples/java/distorm/src/diStorm3/DecodedResult.java +11 -0
- data/funchook/distorm/examples/java/distorm/src/diStorm3/DecomposedInst.java +89 -0
- data/funchook/distorm/examples/java/distorm/src/diStorm3/DecomposedResult.java +11 -0
- data/funchook/distorm/examples/java/distorm/src/diStorm3/OpcodeEnum.java +131 -0
- data/funchook/distorm/examples/java/distorm/src/diStorm3/Opcodes.java +1123 -0
- data/funchook/distorm/examples/java/distorm/src/diStorm3/Operand.java +24 -0
- data/funchook/distorm/examples/java/distorm/src/diStorm3/distorm3.java +41 -0
- data/funchook/distorm/examples/java/jdistorm.c +405 -0
- data/funchook/distorm/examples/java/jdistorm.h +40 -0
- data/funchook/distorm/examples/java/jdistorm.sln +20 -0
- data/funchook/distorm/examples/java/jdistorm.vcproj +208 -0
- data/funchook/distorm/examples/linux/Makefile +15 -0
- data/funchook/distorm/examples/linux/main.c +181 -0
- data/funchook/distorm/examples/tests/Makefile +15 -0
- data/funchook/distorm/examples/tests/main.cpp +42 -0
- data/funchook/distorm/examples/tests/main.py +66 -0
- data/funchook/distorm/examples/tests/test_distorm3.py +1672 -0
- data/funchook/distorm/examples/tests/tests.sln +20 -0
- data/funchook/distorm/examples/tests/tests.vcxproj +82 -0
- data/funchook/distorm/examples/tests/tests.vcxproj.filters +22 -0
- data/funchook/distorm/examples/win32/disasm.sln +25 -0
- data/funchook/distorm/examples/win32/disasm.vcxproj +201 -0
- data/funchook/distorm/examples/win32/disasm.vcxproj.filters +14 -0
- data/funchook/distorm/examples/win32/main.cpp +163 -0
- data/funchook/distorm/include/distorm.h +482 -0
- data/funchook/distorm/include/mnemonics.h +301 -0
- data/funchook/distorm/make/linux/Makefile +28 -0
- data/funchook/distorm/make/mac/Makefile +24 -0
- data/funchook/distorm/make/win32/cdistorm.vcxproj +239 -0
- data/funchook/distorm/make/win32/cdistorm.vcxproj.filters +80 -0
- data/funchook/distorm/make/win32/distorm.sln +25 -0
- data/funchook/distorm/make/win32/resource.h +14 -0
- data/funchook/distorm/make/win32/resource.rc +99 -0
- data/funchook/distorm/python/distorm3/__init__.py +957 -0
- data/funchook/distorm/python/distorm3/sample.py +51 -0
- data/funchook/distorm/setup.cfg +10 -0
- data/funchook/distorm/setup.py +266 -0
- data/funchook/distorm/src/config.h +169 -0
- data/funchook/distorm/src/decoder.c +641 -0
- data/funchook/distorm/src/decoder.h +33 -0
- data/funchook/distorm/src/distorm.c +413 -0
- data/funchook/distorm/src/instructions.c +597 -0
- data/funchook/distorm/src/instructions.h +463 -0
- data/funchook/distorm/src/insts.c +7939 -0
- data/funchook/distorm/src/insts.h +64 -0
- data/funchook/distorm/src/mnemonics.c +284 -0
- data/funchook/distorm/src/operands.c +1290 -0
- data/funchook/distorm/src/operands.h +28 -0
- data/funchook/distorm/src/prefix.c +368 -0
- data/funchook/distorm/src/prefix.h +64 -0
- data/funchook/distorm/src/textdefs.c +172 -0
- data/funchook/distorm/src/textdefs.h +57 -0
- data/funchook/distorm/src/wstring.c +47 -0
- data/funchook/distorm/src/wstring.h +35 -0
- data/funchook/distorm/src/x86defs.h +82 -0
- data/funchook/include/funchook.h +123 -0
- data/funchook/install-sh +527 -0
- data/funchook/src/Makefile +70 -0
- data/funchook/src/Makefile.in +70 -0
- data/funchook/src/__strerror.h +109 -0
- data/funchook/src/config.h +101 -0
- data/funchook/src/config.h.in +100 -0
- data/funchook/src/decoder.o +0 -0
- data/funchook/src/distorm.o +0 -0
- data/funchook/src/funchook.c +440 -0
- data/funchook/src/funchook.o +0 -0
- data/funchook/src/funchook_internal.h +155 -0
- data/funchook/src/funchook_io.c +182 -0
- data/funchook/src/funchook_io.h +64 -0
- data/funchook/src/funchook_io.o +0 -0
- data/funchook/src/funchook_syscall.S +134 -0
- data/funchook/src/funchook_syscall.o +0 -0
- data/funchook/src/funchook_unix.c +480 -0
- data/funchook/src/funchook_unix.o +0 -0
- data/funchook/src/funchook_windows.c +397 -0
- data/funchook/src/funchook_x86.c +622 -0
- data/funchook/src/funchook_x86.o +0 -0
- data/funchook/src/instructions.o +0 -0
- data/funchook/src/insts.o +0 -0
- data/funchook/src/libfunchook.so +0 -0
- data/funchook/src/mnemonics.o +0 -0
- data/funchook/src/operands.o +0 -0
- data/funchook/src/os_func.c +115 -0
- data/funchook/src/os_func.h +75 -0
- data/funchook/src/os_func.o +0 -0
- data/funchook/src/os_func_unix.c +94 -0
- data/funchook/src/os_func_unix.o +0 -0
- data/funchook/src/os_func_windows.c +32 -0
- data/funchook/src/prefix.o +0 -0
- data/funchook/src/printf_base.c +1688 -0
- data/funchook/src/printf_base.h +46 -0
- data/funchook/src/printf_base.o +0 -0
- data/funchook/src/textdefs.o +0 -0
- data/funchook/src/wstring.o +0 -0
- data/funchook/test/Makefile +43 -0
- data/funchook/test/Makefile.in +43 -0
- data/funchook/test/funchook_test +0 -0
- data/funchook/test/libfunchook_test.c +25 -0
- data/funchook/test/libfunchook_test.so +0 -0
- data/funchook/test/libfunchook_test2.c +18 -0
- data/funchook/test/suffix.list +600 -0
- data/funchook/test/test_main.c +430 -0
- data/funchook/test/test_main.o +0 -0
- data/funchook/test/x86_64_test.S +10 -0
- data/funchook/test/x86_64_test.o +0 -0
- data/funchook/test/x86_test.S +339 -0
- data/funchook/win32/config.h +1 -0
- data/funchook/win32/funchook.sln +52 -0
- data/funchook/win32/funchook.vcxproj +188 -0
- data/funchook/win32/funchook.vcxproj.filters +84 -0
- data/funchook/win32/funchook_test.vcxproj +170 -0
- data/funchook/win32/funchook_test.vcxproj.filters +22 -0
- data/funchook/win32/funchook_test_dll.vcxproj +184 -0
- data/funchook/win32/funchook_test_dll.vcxproj.filters +30 -0
- data/funchook/win32/funchook_test_exe.def +3 -0
- data/lib/contrast-agent.rb +8 -0
- data/lib/contrast.rb +57 -0
- data/lib/contrast/agent.rb +80 -0
- data/lib/contrast/agent/assess.rb +45 -0
- data/lib/contrast/agent/assess/adjusted_span.rb +25 -0
- data/lib/contrast/agent/assess/class_reverter.rb +82 -0
- data/lib/contrast/agent/assess/contrast_event.rb +398 -0
- data/lib/contrast/agent/assess/frozen_properties.rb +41 -0
- data/lib/contrast/agent/assess/insulator.rb +53 -0
- data/lib/contrast/agent/assess/policy/dynamic_source_factory.rb +78 -0
- data/lib/contrast/agent/assess/policy/patcher.rb +85 -0
- data/lib/contrast/agent/assess/policy/policy.rb +116 -0
- data/lib/contrast/agent/assess/policy/policy_node.rb +289 -0
- data/lib/contrast/agent/assess/policy/policy_scanner.rb +44 -0
- data/lib/contrast/agent/assess/policy/preshift.rb +94 -0
- data/lib/contrast/agent/assess/policy/propagation_method.rb +260 -0
- data/lib/contrast/agent/assess/policy/propagation_node.rb +127 -0
- data/lib/contrast/agent/assess/policy/propagator.rb +35 -0
- data/lib/contrast/agent/assess/policy/propagator/append.rb +54 -0
- data/lib/contrast/agent/assess/policy/propagator/base.rb +37 -0
- data/lib/contrast/agent/assess/policy/propagator/center.rb +73 -0
- data/lib/contrast/agent/assess/policy/propagator/custom.rb +36 -0
- data/lib/contrast/agent/assess/policy/propagator/database_write.rb +62 -0
- data/lib/contrast/agent/assess/policy/propagator/insert.rb +55 -0
- data/lib/contrast/agent/assess/policy/propagator/keep.rb +26 -0
- data/lib/contrast/agent/assess/policy/propagator/next.rb +42 -0
- data/lib/contrast/agent/assess/policy/propagator/prepend.rb +50 -0
- data/lib/contrast/agent/assess/policy/propagator/remove.rb +76 -0
- data/lib/contrast/agent/assess/policy/propagator/replace.rb +27 -0
- data/lib/contrast/agent/assess/policy/propagator/reverse.rb +38 -0
- data/lib/contrast/agent/assess/policy/propagator/select.rb +86 -0
- data/lib/contrast/agent/assess/policy/propagator/splat.rb +60 -0
- data/lib/contrast/agent/assess/policy/propagator/split.rb +49 -0
- data/lib/contrast/agent/assess/policy/propagator/substitution.rb +169 -0
- data/lib/contrast/agent/assess/policy/propagator/trim.rb +81 -0
- data/lib/contrast/agent/assess/policy/rewriter_patch.rb +79 -0
- data/lib/contrast/agent/assess/policy/source_method.rb +209 -0
- data/lib/contrast/agent/assess/policy/source_node.rb +62 -0
- data/lib/contrast/agent/assess/policy/trigger_method.rb +209 -0
- data/lib/contrast/agent/assess/policy/trigger_node.rb +198 -0
- data/lib/contrast/agent/assess/policy/trigger_validation/ssrf_validator.rb +77 -0
- data/lib/contrast/agent/assess/policy/trigger_validation/trigger_validation.rb +31 -0
- data/lib/contrast/agent/assess/policy/trigger_validation/xss_validator.rb +40 -0
- data/lib/contrast/agent/assess/properties.rb +392 -0
- data/lib/contrast/agent/assess/rule.rb +18 -0
- data/lib/contrast/agent/assess/rule/base.rb +72 -0
- data/lib/contrast/agent/assess/rule/csrf.rb +66 -0
- data/lib/contrast/agent/assess/rule/csrf/csrf_action.rb +28 -0
- data/lib/contrast/agent/assess/rule/csrf/csrf_applicator.rb +69 -0
- data/lib/contrast/agent/assess/rule/csrf/csrf_watcher.rb +132 -0
- data/lib/contrast/agent/assess/rule/provider.rb +21 -0
- data/lib/contrast/agent/assess/rule/provider/hardcoded_key.rb +62 -0
- data/lib/contrast/agent/assess/rule/provider/hardcoded_password.rb +73 -0
- data/lib/contrast/agent/assess/rule/provider/hardcoded_value_rule.rb +121 -0
- data/lib/contrast/agent/assess/rule/redos.rb +68 -0
- data/lib/contrast/agent/assess/rule/response_scanning_rule.rb +47 -0
- data/lib/contrast/agent/assess/rule/response_watcher.rb +36 -0
- data/lib/contrast/agent/assess/rule/watcher.rb +36 -0
- data/lib/contrast/agent/assess/tag.rb +151 -0
- data/lib/contrast/agent/at_exit_hook.rb +33 -0
- data/lib/contrast/agent/class_reopener.rb +195 -0
- data/lib/contrast/agent/deadzone/policy/deadzone_node.rb +26 -0
- data/lib/contrast/agent/deadzone/policy/policy.rb +57 -0
- data/lib/contrast/agent/disable_reaction.rb +24 -0
- data/lib/contrast/agent/exclusion_matcher.rb +190 -0
- data/lib/contrast/agent/feature_state.rb +379 -0
- data/lib/contrast/agent/inventory/policy/policy.rb +32 -0
- data/lib/contrast/agent/inventory/policy/trigger_node.rb +22 -0
- data/lib/contrast/agent/logger_manager.rb +116 -0
- data/lib/contrast/agent/middleware.rb +352 -0
- data/lib/contrast/agent/module_data.rb +16 -0
- data/lib/contrast/agent/patching/policy/after_load_patch.rb +37 -0
- data/lib/contrast/agent/patching/policy/after_load_patcher.rb +58 -0
- data/lib/contrast/agent/patching/policy/method_policy.rb +94 -0
- data/lib/contrast/agent/patching/policy/module_policy.rb +116 -0
- data/lib/contrast/agent/patching/policy/patch.rb +312 -0
- data/lib/contrast/agent/patching/policy/patch_status.rb +192 -0
- data/lib/contrast/agent/patching/policy/patcher.rb +310 -0
- data/lib/contrast/agent/patching/policy/policy.rb +138 -0
- data/lib/contrast/agent/patching/policy/policy_node.rb +80 -0
- data/lib/contrast/agent/patching/policy/policy_unpatcher.rb +28 -0
- data/lib/contrast/agent/patching/policy/trigger_node.rb +81 -0
- data/lib/contrast/agent/protect/policy/policy.rb +37 -0
- data/lib/contrast/agent/protect/policy/trigger_node.rb +23 -0
- data/lib/contrast/agent/protect/rule.rb +58 -0
- data/lib/contrast/agent/protect/rule/base.rb +300 -0
- data/lib/contrast/agent/protect/rule/base_service.rb +88 -0
- data/lib/contrast/agent/protect/rule/cmd_injection.rb +156 -0
- data/lib/contrast/agent/protect/rule/csrf.rb +118 -0
- data/lib/contrast/agent/protect/rule/csrf/csrf_evaluator.rb +103 -0
- data/lib/contrast/agent/protect/rule/csrf/csrf_token_injector.rb +85 -0
- data/lib/contrast/agent/protect/rule/default_scanner.rb +300 -0
- data/lib/contrast/agent/protect/rule/deserialization.rb +193 -0
- data/lib/contrast/agent/protect/rule/http_method_tampering.rb +80 -0
- data/lib/contrast/agent/protect/rule/no_sqli.rb +101 -0
- data/lib/contrast/agent/protect/rule/no_sqli/mongo_no_sql_scanner.rb +40 -0
- data/lib/contrast/agent/protect/rule/path_traversal.rb +143 -0
- data/lib/contrast/agent/protect/rule/sqli.rb +101 -0
- data/lib/contrast/agent/protect/rule/sqli/default_sql_scanner.rb +16 -0
- data/lib/contrast/agent/protect/rule/sqli/mysql_sql_scanner.rb +38 -0
- data/lib/contrast/agent/protect/rule/sqli/postgres_sql_scanner.rb +22 -0
- data/lib/contrast/agent/protect/rule/sqli/sqlite_sql_scanner.rb +19 -0
- data/lib/contrast/agent/protect/rule/unsafe_file_upload.rb +20 -0
- data/lib/contrast/agent/protect/rule/xss.rb +24 -0
- data/lib/contrast/agent/protect/rule/xxe.rb +120 -0
- data/lib/contrast/agent/protect/rule/xxe/entity_wrapper.rb +82 -0
- data/lib/contrast/agent/railtie.rb +30 -0
- data/lib/contrast/agent/reaction_processor.rb +47 -0
- data/lib/contrast/agent/request.rb +493 -0
- data/lib/contrast/agent/request_context.rb +225 -0
- data/lib/contrast/agent/require_state.rb +61 -0
- data/lib/contrast/agent/response.rb +215 -0
- data/lib/contrast/agent/rewriter.rb +244 -0
- data/lib/contrast/agent/scope.rb +28 -0
- data/lib/contrast/agent/service_heartbeat.rb +37 -0
- data/lib/contrast/agent/settings_state.rb +148 -0
- data/lib/contrast/agent/socket_client.rb +125 -0
- data/lib/contrast/agent/thread.rb +26 -0
- data/lib/contrast/agent/tracepoint_hook.rb +51 -0
- data/lib/contrast/agent/version.rb +8 -0
- data/lib/contrast/api.rb +17 -0
- data/lib/contrast/api/.gitkeep +0 -0
- data/lib/contrast/api/connection_status.rb +49 -0
- data/lib/contrast/api/socket.rb +43 -0
- data/lib/contrast/api/speedracer.rb +206 -0
- data/lib/contrast/api/tcp_socket.rb +31 -0
- data/lib/contrast/api/unix_socket.rb +25 -0
- data/lib/contrast/common_agent_configuration.rb +86 -0
- data/lib/contrast/components/agent.rb +85 -0
- data/lib/contrast/components/app_context.rb +188 -0
- data/lib/contrast/components/assess.rb +67 -0
- data/lib/contrast/components/config.rb +135 -0
- data/lib/contrast/components/contrast_service.rb +113 -0
- data/lib/contrast/components/heap_dump.rb +34 -0
- data/lib/contrast/components/interface.rb +178 -0
- data/lib/contrast/components/inventory.rb +23 -0
- data/lib/contrast/components/logger.rb +92 -0
- data/lib/contrast/components/protect.rb +38 -0
- data/lib/contrast/components/sampling.rb +41 -0
- data/lib/contrast/components/scope.rb +106 -0
- data/lib/contrast/components/settings.rb +140 -0
- data/lib/contrast/config.rb +33 -0
- data/lib/contrast/config/agent_configuration.rb +24 -0
- data/lib/contrast/config/application_configuration.rb +27 -0
- data/lib/contrast/config/assess_configuration.rb +22 -0
- data/lib/contrast/config/assess_rules_configuration.rb +18 -0
- data/lib/contrast/config/base_configuration.rb +105 -0
- data/lib/contrast/config/default_value.rb +16 -0
- data/lib/contrast/config/exception_configuration.rb +21 -0
- data/lib/contrast/config/heap_dump_configuration.rb +23 -0
- data/lib/contrast/config/inventory_configuration.rb +20 -0
- data/lib/contrast/config/logger_configuration.rb +20 -0
- data/lib/contrast/config/protect_configuration.rb +20 -0
- data/lib/contrast/config/protect_rule_configuration.rb +37 -0
- data/lib/contrast/config/protect_rules_configuration.rb +30 -0
- data/lib/contrast/config/root_configuration.rb +26 -0
- data/lib/contrast/config/ruby_configuration.rb +39 -0
- data/lib/contrast/config/sampling_configuration.rb +22 -0
- data/lib/contrast/config/server_configuration.rb +23 -0
- data/lib/contrast/config/service_configuration.rb +22 -0
- data/lib/contrast/configuration.rb +214 -0
- data/lib/contrast/core_extensions/assess.rb +51 -0
- data/lib/contrast/core_extensions/assess/array.rb +58 -0
- data/lib/contrast/core_extensions/assess/assess_extension.rb +145 -0
- data/lib/contrast/core_extensions/assess/basic_object.rb +15 -0
- data/lib/contrast/core_extensions/assess/erb.rb +42 -0
- data/lib/contrast/core_extensions/assess/exec_trigger.rb +48 -0
- data/lib/contrast/core_extensions/assess/fiber.rb +125 -0
- data/lib/contrast/core_extensions/assess/hash.rb +22 -0
- data/lib/contrast/core_extensions/assess/kernel.rb +95 -0
- data/lib/contrast/core_extensions/assess/module.rb +14 -0
- data/lib/contrast/core_extensions/assess/regexp.rb +206 -0
- data/lib/contrast/core_extensions/assess/string.rb +75 -0
- data/lib/contrast/core_extensions/assess/tilt_template_trigger.rb +73 -0
- data/lib/contrast/core_extensions/delegator.rb +14 -0
- data/lib/contrast/core_extensions/eval_trigger.rb +52 -0
- data/lib/contrast/core_extensions/inventory.rb +22 -0
- data/lib/contrast/core_extensions/inventory/datastores.rb +37 -0
- data/lib/contrast/core_extensions/module.rb +42 -0
- data/lib/contrast/core_extensions/object.rb +27 -0
- data/lib/contrast/core_extensions/protect.rb +20 -0
- data/lib/contrast/core_extensions/protect/applies_command_injection_rule.rb +70 -0
- data/lib/contrast/core_extensions/protect/applies_deserialization_rule.rb +58 -0
- data/lib/contrast/core_extensions/protect/applies_no_sqli_rule.rb +81 -0
- data/lib/contrast/core_extensions/protect/applies_path_traversal_rule.rb +119 -0
- data/lib/contrast/core_extensions/protect/applies_sqli_rule.rb +63 -0
- data/lib/contrast/core_extensions/protect/applies_xxe_rule.rb +141 -0
- data/lib/contrast/core_extensions/protect/kernel.rb +30 -0
- data/lib/contrast/core_extensions/protect/psych.rb +7 -0
- data/lib/contrast/core_extensions/thread.rb +31 -0
- data/lib/contrast/internal_exception.rb +8 -0
- data/lib/contrast/rails_extensions/assess/action_controller_inheritance.rb +48 -0
- data/lib/contrast/rails_extensions/assess/active_record.rb +32 -0
- data/lib/contrast/rails_extensions/assess/active_record_named.rb +61 -0
- data/lib/contrast/rails_extensions/assess/configuration.rb +26 -0
- data/lib/contrast/rails_extensions/buffer.rb +30 -0
- data/lib/contrast/rails_extensions/rack.rb +45 -0
- data/lib/contrast/security_exception.rb +14 -0
- data/lib/contrast/sinatra_extensions/assess/cookie.rb +26 -0
- data/lib/contrast/sinatra_extensions/inventory/sinatra_base.rb +59 -0
- data/lib/contrast/tasks/service.rb +95 -0
- data/lib/contrast/utils/assess/sampling_util.rb +96 -0
- data/lib/contrast/utils/assess/tracking_util.rb +39 -0
- data/lib/contrast/utils/boolean_util.rb +33 -0
- data/lib/contrast/utils/cache.rb +69 -0
- data/lib/contrast/utils/class_util.rb +58 -0
- data/lib/contrast/utils/comment_range.rb +19 -0
- data/lib/contrast/utils/data_store_util.rb +23 -0
- data/lib/contrast/utils/duck_utils.rb +58 -0
- data/lib/contrast/utils/env_configuration_item.rb +52 -0
- data/lib/contrast/utils/environment_util.rb +152 -0
- data/lib/contrast/utils/freeze_util.rb +36 -0
- data/lib/contrast/utils/gemfile_reader.rb +191 -0
- data/lib/contrast/utils/hash_digest.rb +148 -0
- data/lib/contrast/utils/heap_dump_util.rb +113 -0
- data/lib/contrast/utils/invalid_configuration_util.rb +88 -0
- data/lib/contrast/utils/inventory_util.rb +126 -0
- data/lib/contrast/utils/io_util.rb +61 -0
- data/lib/contrast/utils/object_share.rb +117 -0
- data/lib/contrast/utils/operating_environment.rb +38 -0
- data/lib/contrast/utils/os.rb +49 -0
- data/lib/contrast/utils/path_util.rb +151 -0
- data/lib/contrast/utils/performs_logging.rb +152 -0
- data/lib/contrast/utils/preflight_util.rb +13 -0
- data/lib/contrast/utils/prevent_serialization.rb +52 -0
- data/lib/contrast/utils/rack_assess_session_cookie.rb +104 -0
- data/lib/contrast/utils/rails_assess_configuration.rb +95 -0
- data/lib/contrast/utils/random_util.rb +22 -0
- data/lib/contrast/utils/resource_loader.rb +23 -0
- data/lib/contrast/utils/ruby_ast_rewriter.rb +74 -0
- data/lib/contrast/utils/scope_util.rb +99 -0
- data/lib/contrast/utils/service_response_util.rb +116 -0
- data/lib/contrast/utils/service_sender_util.rb +98 -0
- data/lib/contrast/utils/sha256_builder.rb +69 -0
- data/lib/contrast/utils/sinatra_helper.rb +49 -0
- data/lib/contrast/utils/stack_trace_utils.rb +209 -0
- data/lib/contrast/utils/string_utils.rb +72 -0
- data/lib/contrast/utils/tag_util.rb +139 -0
- data/lib/contrast/utils/thread_tracker.rb +54 -0
- data/lib/contrast/utils/timer.rb +78 -0
- data/resources/assess/policy.json +1673 -0
- data/resources/csrf/inject.js +44 -0
- data/resources/deadzone/policy.json +55 -0
- data/resources/factory-bot-spec/spec_helper.rb +30 -0
- data/resources/inventory/policy.json +110 -0
- data/resources/protect/policy.json +417 -0
- data/resources/rubocops/kernel/catch_cop.rb +37 -0
- data/resources/rubocops/kernel/require_cop.rb +37 -0
- data/resources/rubocops/kernel/require_relative_cop.rb +33 -0
- data/resources/rubocops/module/autoload_cop.rb +37 -0
- data/resources/rubocops/module/const_defined_cop.rb +37 -0
- data/resources/rubocops/module/const_get_cop.rb +37 -0
- data/resources/rubocops/module/const_set_cop.rb +37 -0
- data/resources/rubocops/module/constants_cop.rb +37 -0
- data/resources/rubocops/module/name_cop.rb +37 -0
- data/resources/rubocops/object/class_cop.rb +37 -0
- data/resources/rubocops/object/freeze_cop.rb +37 -0
- data/resources/rubocops/object/frozen_cop.rb +37 -0
- data/resources/rubocops/object/is_a_cop.rb +37 -0
- data/resources/rubocops/object/method_cop.rb +37 -0
- data/resources/rubocops/object/respond_to_cop.rb +37 -0
- data/resources/rubocops/object/singleton_class_cop.rb +37 -0
- data/resources/rubocops/regexp/spelling_cop.rb +44 -0
- data/resources/rubocops/thread/new_cop.rb +39 -0
- data/resources/ruby-spec/ancestors_spec.rb +70 -0
- data/resources/ruby-spec/modulo_spec.rb +831 -0
- data/resources/ruby-spec/parameters_spec.rb +261 -0
- data/resources/ruby-spec/ruby_spec_spec_helper.rb +35 -0
- data/resources/test_marker.txt +1 -0
- data/ruby-agent.gemspec +129 -0
- data/service_executables/.gitkeep +0 -0
- data/service_executables/VERSION +1 -0
- data/service_executables/linux/contrast-service +0 -0
- data/service_executables/mac/contrast-service +0 -0
- metadata +945 -0
@@ -0,0 +1,40 @@
|
|
1
|
+
/* DO NOT EDIT THIS FILE - it is machine generated */
|
2
|
+
#include <jni.h>
|
3
|
+
/* Header for class Distorm3 */
|
4
|
+
|
5
|
+
#ifndef _Included_Distorm3
|
6
|
+
#define _Included_Distorm3
|
7
|
+
#ifdef __cplusplus
|
8
|
+
extern "C" {
|
9
|
+
#endif
|
10
|
+
|
11
|
+
#define PACKAGE_PREFIX "diStorm3/"
|
12
|
+
|
13
|
+
/*
|
14
|
+
* Class: com_reviverstudio_core_disasms_distorm3_Distorm3
|
15
|
+
* Method: Decompose
|
16
|
+
* Signature: (LdiStorm3/CodeInfo;LdiStorm3/DecomposedResult;)V
|
17
|
+
*/
|
18
|
+
JNIEXPORT void JNICALL Java_diStorm3_distorm3_Decompose
|
19
|
+
(JNIEnv *, jclass, jobject, jobject);
|
20
|
+
|
21
|
+
/*
|
22
|
+
* Class: com_reviverstudio_core_disasms_distorm3_Distorm3
|
23
|
+
* Method: Decode
|
24
|
+
* Signature: (LdiStorm3/CodeInfo;LdiStorm3/DecodedResult;)V
|
25
|
+
*/
|
26
|
+
JNIEXPORT void JNICALL Java_diStorm3_distorm3_Decode
|
27
|
+
(JNIEnv *, jclass, jobject, jobject);
|
28
|
+
|
29
|
+
/*
|
30
|
+
* Class: com_reviverstudio_core_disasms_distorm3_Distorm3
|
31
|
+
* Method: Format
|
32
|
+
* Signature: (LdiStorm3/CodeInfo;LdiStorm3/DecomposedInst;)LdiStorm3/DecodedInst;
|
33
|
+
*/
|
34
|
+
JNIEXPORT jobject JNICALL Java_diStorm3_distorm3_Format
|
35
|
+
(JNIEnv *, jclass, jobject, jobject);
|
36
|
+
|
37
|
+
#ifdef __cplusplus
|
38
|
+
}
|
39
|
+
#endif
|
40
|
+
#endif
|
@@ -0,0 +1,20 @@
|
|
1
|
+
|
2
|
+
Microsoft Visual Studio Solution File, Format Version 10.00
|
3
|
+
# Visual Studio 2008
|
4
|
+
Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "jdistorm", "jdistorm.vcproj", "{AB6B51F5-79C6-44CA-9D0B-7CB2A009A9AB}"
|
5
|
+
EndProject
|
6
|
+
Global
|
7
|
+
GlobalSection(SolutionConfigurationPlatforms) = preSolution
|
8
|
+
Debug|x64 = Debug|x64
|
9
|
+
Release|x64 = Release|x64
|
10
|
+
EndGlobalSection
|
11
|
+
GlobalSection(ProjectConfigurationPlatforms) = postSolution
|
12
|
+
{AB6B51F5-79C6-44CA-9D0B-7CB2A009A9AB}.Debug|x64.ActiveCfg = Debug|x64
|
13
|
+
{AB6B51F5-79C6-44CA-9D0B-7CB2A009A9AB}.Debug|x64.Build.0 = Debug|x64
|
14
|
+
{AB6B51F5-79C6-44CA-9D0B-7CB2A009A9AB}.Release|x64.ActiveCfg = Release|x64
|
15
|
+
{AB6B51F5-79C6-44CA-9D0B-7CB2A009A9AB}.Release|x64.Build.0 = Release|x64
|
16
|
+
EndGlobalSection
|
17
|
+
GlobalSection(SolutionProperties) = preSolution
|
18
|
+
HideSolutionNode = FALSE
|
19
|
+
EndGlobalSection
|
20
|
+
EndGlobal
|
@@ -0,0 +1,208 @@
|
|
1
|
+
<?xml version="1.0" encoding="windows-1255"?>
|
2
|
+
<VisualStudioProject
|
3
|
+
ProjectType="Visual C++"
|
4
|
+
Version="9.00"
|
5
|
+
Name="jdistorm"
|
6
|
+
ProjectGUID="{AB6B51F5-79C6-44CA-9D0B-7CB2A009A9AB}"
|
7
|
+
RootNamespace="jdistorm"
|
8
|
+
Keyword="Win32Proj"
|
9
|
+
TargetFrameworkVersion="196613"
|
10
|
+
>
|
11
|
+
<Platforms>
|
12
|
+
<Platform
|
13
|
+
Name="x64"
|
14
|
+
/>
|
15
|
+
</Platforms>
|
16
|
+
<ToolFiles>
|
17
|
+
</ToolFiles>
|
18
|
+
<Configurations>
|
19
|
+
<Configuration
|
20
|
+
Name="Debug|x64"
|
21
|
+
OutputDirectory="$(SolutionDir)$(PlatformName)\$(ConfigurationName)"
|
22
|
+
IntermediateDirectory="$(PlatformName)\$(ConfigurationName)"
|
23
|
+
ConfigurationType="2"
|
24
|
+
CharacterSet="1"
|
25
|
+
>
|
26
|
+
<Tool
|
27
|
+
Name="VCPreBuildEventTool"
|
28
|
+
/>
|
29
|
+
<Tool
|
30
|
+
Name="VCCustomBuildTool"
|
31
|
+
/>
|
32
|
+
<Tool
|
33
|
+
Name="VCXMLDataGeneratorTool"
|
34
|
+
/>
|
35
|
+
<Tool
|
36
|
+
Name="VCWebServiceProxyGeneratorTool"
|
37
|
+
/>
|
38
|
+
<Tool
|
39
|
+
Name="VCMIDLTool"
|
40
|
+
TargetEnvironment="3"
|
41
|
+
/>
|
42
|
+
<Tool
|
43
|
+
Name="VCCLCompilerTool"
|
44
|
+
Optimization="0"
|
45
|
+
OmitFramePointers="true"
|
46
|
+
AdditionalIncludeDirectories=""C:\Program Files\Java\jdk1.7.0_03\include";"C:\Program Files\Java\jdk1.7.0_03\include\win32""
|
47
|
+
PreprocessorDefinitions="WIN32;_DEBUG;_WINDOWS;_USRDLL;JDISTORM_EXPORTS"
|
48
|
+
MinimalRebuild="true"
|
49
|
+
BasicRuntimeChecks="3"
|
50
|
+
RuntimeLibrary="3"
|
51
|
+
UsePrecompiledHeader="0"
|
52
|
+
WarningLevel="3"
|
53
|
+
DebugInformationFormat="3"
|
54
|
+
/>
|
55
|
+
<Tool
|
56
|
+
Name="VCManagedResourceCompilerTool"
|
57
|
+
/>
|
58
|
+
<Tool
|
59
|
+
Name="VCResourceCompilerTool"
|
60
|
+
/>
|
61
|
+
<Tool
|
62
|
+
Name="VCPreLinkEventTool"
|
63
|
+
/>
|
64
|
+
<Tool
|
65
|
+
Name="VCLinkerTool"
|
66
|
+
AdditionalDependencies="jvm.lib"
|
67
|
+
LinkIncremental="2"
|
68
|
+
AdditionalLibraryDirectories=""C:\Program Files\Java\jdk1.7.0_03\lib""
|
69
|
+
GenerateDebugInformation="true"
|
70
|
+
SubSystem="2"
|
71
|
+
TargetMachine="17"
|
72
|
+
/>
|
73
|
+
<Tool
|
74
|
+
Name="VCALinkTool"
|
75
|
+
/>
|
76
|
+
<Tool
|
77
|
+
Name="VCManifestTool"
|
78
|
+
/>
|
79
|
+
<Tool
|
80
|
+
Name="VCXDCMakeTool"
|
81
|
+
/>
|
82
|
+
<Tool
|
83
|
+
Name="VCBscMakeTool"
|
84
|
+
/>
|
85
|
+
<Tool
|
86
|
+
Name="VCFxCopTool"
|
87
|
+
/>
|
88
|
+
<Tool
|
89
|
+
Name="VCAppVerifierTool"
|
90
|
+
/>
|
91
|
+
<Tool
|
92
|
+
Name="VCPostBuildEventTool"
|
93
|
+
/>
|
94
|
+
</Configuration>
|
95
|
+
<Configuration
|
96
|
+
Name="Release|x64"
|
97
|
+
OutputDirectory="$(SolutionDir)$(PlatformName)\$(ConfigurationName)"
|
98
|
+
IntermediateDirectory="$(PlatformName)\$(ConfigurationName)"
|
99
|
+
ConfigurationType="2"
|
100
|
+
CharacterSet="1"
|
101
|
+
WholeProgramOptimization="1"
|
102
|
+
>
|
103
|
+
<Tool
|
104
|
+
Name="VCPreBuildEventTool"
|
105
|
+
/>
|
106
|
+
<Tool
|
107
|
+
Name="VCCustomBuildTool"
|
108
|
+
/>
|
109
|
+
<Tool
|
110
|
+
Name="VCXMLDataGeneratorTool"
|
111
|
+
/>
|
112
|
+
<Tool
|
113
|
+
Name="VCWebServiceProxyGeneratorTool"
|
114
|
+
/>
|
115
|
+
<Tool
|
116
|
+
Name="VCMIDLTool"
|
117
|
+
TargetEnvironment="3"
|
118
|
+
/>
|
119
|
+
<Tool
|
120
|
+
Name="VCCLCompilerTool"
|
121
|
+
Optimization="2"
|
122
|
+
EnableIntrinsicFunctions="true"
|
123
|
+
AdditionalIncludeDirectories=""C:\Program Files (x86)\Java\jdk1.6.0_21\include\win32";"C:\Program Files (x86)\Java\jdk1.6.0_21\include""
|
124
|
+
PreprocessorDefinitions="WIN32;NDEBUG;_WINDOWS;_USRDLL;JDISTORM_EXPORTS"
|
125
|
+
RuntimeLibrary="2"
|
126
|
+
EnableFunctionLevelLinking="true"
|
127
|
+
UsePrecompiledHeader="0"
|
128
|
+
WarningLevel="3"
|
129
|
+
DebugInformationFormat="3"
|
130
|
+
/>
|
131
|
+
<Tool
|
132
|
+
Name="VCManagedResourceCompilerTool"
|
133
|
+
/>
|
134
|
+
<Tool
|
135
|
+
Name="VCResourceCompilerTool"
|
136
|
+
/>
|
137
|
+
<Tool
|
138
|
+
Name="VCPreLinkEventTool"
|
139
|
+
/>
|
140
|
+
<Tool
|
141
|
+
Name="VCLinkerTool"
|
142
|
+
AdditionalDependencies="jvm.lib"
|
143
|
+
OutputFile="distorm3.dll"
|
144
|
+
LinkIncremental="1"
|
145
|
+
AdditionalLibraryDirectories=""C:\Program Files (x86)\Java\jdk1.6.0_21\lib""
|
146
|
+
GenerateManifest="true"
|
147
|
+
GenerateDebugInformation="true"
|
148
|
+
SubSystem="2"
|
149
|
+
OptimizeReferences="2"
|
150
|
+
EnableCOMDATFolding="2"
|
151
|
+
TargetMachine="17"
|
152
|
+
/>
|
153
|
+
<Tool
|
154
|
+
Name="VCALinkTool"
|
155
|
+
/>
|
156
|
+
<Tool
|
157
|
+
Name="VCManifestTool"
|
158
|
+
/>
|
159
|
+
<Tool
|
160
|
+
Name="VCXDCMakeTool"
|
161
|
+
/>
|
162
|
+
<Tool
|
163
|
+
Name="VCBscMakeTool"
|
164
|
+
/>
|
165
|
+
<Tool
|
166
|
+
Name="VCFxCopTool"
|
167
|
+
/>
|
168
|
+
<Tool
|
169
|
+
Name="VCAppVerifierTool"
|
170
|
+
/>
|
171
|
+
<Tool
|
172
|
+
Name="VCPostBuildEventTool"
|
173
|
+
/>
|
174
|
+
</Configuration>
|
175
|
+
</Configurations>
|
176
|
+
<References>
|
177
|
+
</References>
|
178
|
+
<Files>
|
179
|
+
<Filter
|
180
|
+
Name="Source Files"
|
181
|
+
Filter="cpp;c;cc;cxx;def;odl;idl;hpj;bat;asm;asmx"
|
182
|
+
UniqueIdentifier="{4FC737F1-C7A5-4376-A066-2A32D752A2FF}"
|
183
|
+
>
|
184
|
+
<File
|
185
|
+
RelativePath=".\jdistorm.c"
|
186
|
+
>
|
187
|
+
</File>
|
188
|
+
</Filter>
|
189
|
+
<Filter
|
190
|
+
Name="Header Files"
|
191
|
+
Filter="h;hpp;hxx;hm;inl;inc;xsd"
|
192
|
+
UniqueIdentifier="{93995380-89BD-4b04-88EB-625FBE52EBFB}"
|
193
|
+
>
|
194
|
+
<File
|
195
|
+
RelativePath=".\jdistorm.h"
|
196
|
+
>
|
197
|
+
</File>
|
198
|
+
</Filter>
|
199
|
+
<Filter
|
200
|
+
Name="Resource Files"
|
201
|
+
Filter="rc;ico;cur;bmp;dlg;rc2;rct;bin;rgs;gif;jpg;jpeg;jpe;resx;tiff;tif;png;wav"
|
202
|
+
UniqueIdentifier="{67DA6AB6-F800-4c08-8B7A-83BB121AAD01}"
|
203
|
+
>
|
204
|
+
</Filter>
|
205
|
+
</Files>
|
206
|
+
<Globals>
|
207
|
+
</Globals>
|
208
|
+
</VisualStudioProject>
|
@@ -0,0 +1,181 @@
|
|
1
|
+
// diStorm64 library sample
|
2
|
+
// http://ragestorm.net/distorm/
|
3
|
+
// Arkon, Stefan, 2005
|
4
|
+
// Mikhail, 2006
|
5
|
+
// JvW, 2007
|
6
|
+
|
7
|
+
#include <stdio.h>
|
8
|
+
#include <stdlib.h>
|
9
|
+
#include <string.h>
|
10
|
+
#include <time.h>
|
11
|
+
#include <errno.h>
|
12
|
+
#include <sys/stat.h>
|
13
|
+
|
14
|
+
// For the compilers who don't have sysexits.h, which is not an ISO/ANSI include!
|
15
|
+
#define EX_OK 0
|
16
|
+
#define EX_USAGE 64
|
17
|
+
#define EX_DATAERR 65
|
18
|
+
#define EX_NOINPUT 66
|
19
|
+
#define EX_NOUSER 67
|
20
|
+
#define EX_NOHOST 68
|
21
|
+
#define EX_UNAVAILABLE 69
|
22
|
+
#define EX_SOFTWARE 70
|
23
|
+
#define EX_OSERR 71
|
24
|
+
#define EX_OSFILE 72
|
25
|
+
#define EX_CANTCREAT 73
|
26
|
+
#define EX_IOERR 74
|
27
|
+
#define EX_TEMPFAIL 75
|
28
|
+
#define EX_PROTOCOL 76
|
29
|
+
#define EX_NOPERM 77
|
30
|
+
#define EX_CONFIG 78
|
31
|
+
|
32
|
+
#include "../../include/distorm.h"
|
33
|
+
|
34
|
+
// The number of the array of instructions the decoder function will use to return the disassembled instructions.
|
35
|
+
// Play with this value for performance...
|
36
|
+
#define MAX_INSTRUCTIONS (1000)
|
37
|
+
|
38
|
+
int main(int argc, char **argv)
|
39
|
+
{
|
40
|
+
// Version of used compiled library.
|
41
|
+
unsigned int dver = 0;
|
42
|
+
// Holds the result of the decoding.
|
43
|
+
_DecodeResult res;
|
44
|
+
// Decoded instruction information.
|
45
|
+
_DecodedInst decodedInstructions[MAX_INSTRUCTIONS];
|
46
|
+
// next is used for instruction's offset synchronization.
|
47
|
+
// decodedInstructionsCount holds the count of filled instructions' array by the decoder.
|
48
|
+
unsigned int decodedInstructionsCount = 0, i, next;
|
49
|
+
|
50
|
+
// Default decoding mode is 32 bits, could be set by command line.
|
51
|
+
_DecodeType dt = Decode32Bits;
|
52
|
+
|
53
|
+
// Default offset for buffer is 0, could be set in command line.
|
54
|
+
_OffsetType offset = 0;
|
55
|
+
char* errch = NULL;
|
56
|
+
|
57
|
+
// Index to file name in argv.
|
58
|
+
int param = 1;
|
59
|
+
|
60
|
+
// Handling file.
|
61
|
+
FILE* f;
|
62
|
+
unsigned long filesize = 0, bytesread = 0;
|
63
|
+
struct stat st;
|
64
|
+
|
65
|
+
// Buffer to disassemble.
|
66
|
+
unsigned char *buf, *buf2;
|
67
|
+
|
68
|
+
// Disassembler version.
|
69
|
+
dver = distorm_version();
|
70
|
+
printf("diStorm version: %u.%u.%u\n", (dver >> 16), ((dver) >> 8) & 0xff, dver & 0xff);
|
71
|
+
|
72
|
+
// Check params.
|
73
|
+
if (argc < 2 || argc > 4) {
|
74
|
+
printf("Usage: ./disasm [-b16] [-b64] filename [memory offset]\r\nRaw disassembler output.\r\nMemory offset is origin of binary file in memory (address in hex).\r\nDefault decoding mode is -b32.\r\nexample: disasm -b16 demo.com 789a\r\n");
|
75
|
+
return EX_USAGE;
|
76
|
+
}
|
77
|
+
|
78
|
+
if (strncmp(argv[param], "-b16", 4) == 0) {
|
79
|
+
dt = Decode16Bits;
|
80
|
+
param++;
|
81
|
+
} else if (strncmp(argv[param], "-b64", 4) == 0) {
|
82
|
+
dt = Decode64Bits;
|
83
|
+
param++;
|
84
|
+
} else if (*argv[param] == '-') {
|
85
|
+
fputs("Decoding mode size isn't specified!\n", stderr);
|
86
|
+
return EX_USAGE;
|
87
|
+
} else if (argc == 4) {
|
88
|
+
fputs("Too many parameters are set.\n", stderr);
|
89
|
+
return EX_USAGE;
|
90
|
+
}
|
91
|
+
if (param >= argc) {
|
92
|
+
fputs("Filename is missing.\n", stderr);
|
93
|
+
return EX_USAGE;
|
94
|
+
}
|
95
|
+
if (param + 1 == argc-1) { // extra param?
|
96
|
+
#ifdef SUPPORT_64BIT_OFFSET
|
97
|
+
offset = strtoull(argv[param + 1], &errch, 16);
|
98
|
+
#else
|
99
|
+
offset = strtoul(argv[param + 1], &errch, 16);
|
100
|
+
#endif
|
101
|
+
if (*errch != '\0') {
|
102
|
+
fprintf(stderr, "Offset `%s' couldn't be converted.\n", argv[param + 1]);
|
103
|
+
return EX_USAGE;
|
104
|
+
}
|
105
|
+
}
|
106
|
+
|
107
|
+
f = fopen(argv[param], "rb");
|
108
|
+
if (f == NULL) {
|
109
|
+
perror(argv[param]);
|
110
|
+
return EX_NOINPUT;
|
111
|
+
}
|
112
|
+
|
113
|
+
if (fstat(fileno(f), &st) != 0) {
|
114
|
+
perror("fstat");
|
115
|
+
fclose(f);
|
116
|
+
return EX_NOINPUT;
|
117
|
+
}
|
118
|
+
filesize = st.st_size;
|
119
|
+
|
120
|
+
// We read the whole file into memory in order to make life easier,
|
121
|
+
// otherwise we would have to synchronize the code buffer as well (so instructions won't be split).
|
122
|
+
buf2 = buf = malloc(filesize);
|
123
|
+
if (buf == NULL) {
|
124
|
+
perror("File too large.");
|
125
|
+
fclose(f);
|
126
|
+
return EX_UNAVAILABLE;
|
127
|
+
}
|
128
|
+
bytesread = fread(buf, 1, filesize, f);
|
129
|
+
if (bytesread != filesize) {
|
130
|
+
perror("Can't read file into memory.");
|
131
|
+
free(buf);
|
132
|
+
fclose(f);
|
133
|
+
return EX_IOERR;
|
134
|
+
}
|
135
|
+
|
136
|
+
fclose(f);
|
137
|
+
|
138
|
+
printf("bits: %d\nfilename: %s\norigin: ", dt == Decode16Bits ? 16 : dt == Decode32Bits ? 32 : 64, argv[param]);
|
139
|
+
#ifdef SUPPORT_64BIT_OFFSET
|
140
|
+
if (dt != Decode64Bits) printf("%08llx\n", offset);
|
141
|
+
else printf("%016llx\n", offset);
|
142
|
+
#else
|
143
|
+
printf("%08x\n", offset);
|
144
|
+
#endif
|
145
|
+
|
146
|
+
// Decode the buffer at given offset (virtual address).
|
147
|
+
while (1) {
|
148
|
+
// If you get an undefined reference linker error for the following line,
|
149
|
+
// change the SUPPORT_64BIT_OFFSET in distorm.h.
|
150
|
+
res = distorm_decode(offset, (const unsigned char*)buf, filesize, dt, decodedInstructions, MAX_INSTRUCTIONS, &decodedInstructionsCount);
|
151
|
+
if (res == DECRES_INPUTERR) {
|
152
|
+
// Null buffer? Decode type not 16/32/64?
|
153
|
+
fputs("Input error, halting!\n", stderr);
|
154
|
+
free(buf2);
|
155
|
+
return EX_SOFTWARE;
|
156
|
+
}
|
157
|
+
|
158
|
+
for (i = 0; i < decodedInstructionsCount; i++)
|
159
|
+
#ifdef SUPPORT_64BIT_OFFSET
|
160
|
+
printf("%0*llx (%02d) %-24s %s%s%s\r\n", dt != Decode64Bits ? 8 : 16, decodedInstructions[i].offset, decodedInstructions[i].size, (char*)decodedInstructions[i].instructionHex.p, (char*)decodedInstructions[i].mnemonic.p, decodedInstructions[i].operands.length != 0 ? " " : "", (char*)decodedInstructions[i].operands.p);
|
161
|
+
#else
|
162
|
+
printf("%08x (%02d) %-24s %s%s%s\r\n", decodedInstructions[i].offset, decodedInstructions[i].size, (char*)decodedInstructions[i].instructionHex.p, (char*)decodedInstructions[i].mnemonic.p, decodedInstructions[i].operands.length != 0 ? " " : "", (char*)decodedInstructions[i].operands.p);
|
163
|
+
#endif
|
164
|
+
|
165
|
+
if (res == DECRES_SUCCESS) break; // All instructions were decoded.
|
166
|
+
else if (decodedInstructionsCount == 0) break;
|
167
|
+
|
168
|
+
// Synchronize:
|
169
|
+
next = (unsigned int)(decodedInstructions[decodedInstructionsCount-1].offset - offset);
|
170
|
+
next += decodedInstructions[decodedInstructionsCount-1].size;
|
171
|
+
// Advance ptr and recalc offset.
|
172
|
+
buf += next;
|
173
|
+
filesize -= next;
|
174
|
+
offset += next;
|
175
|
+
}
|
176
|
+
|
177
|
+
// Release buffer
|
178
|
+
free(buf2);
|
179
|
+
|
180
|
+
return EX_OK;
|
181
|
+
}
|