Re: Analyze binary for holes

On Thu, Jul 31, 2003 at 10:19:18PM -0000, DownBload wrote:
> In-Reply-To: <20030729162007.7689.qmail@www.securityfocus.com>

Sorry, but this thread is now getting ridiculous, reverse engineering using strings is silly. If you insist on looking for vulnerable functions you should actually look for function imports using the correct tool for the binary file you're looking at, e.g:

$ elfdump -s /bin/ls | grep strcpy

      [81] 0x00024190 0x00000000 FUNC GLOB D 0 UNDEF strcpy

If you decide you want to verify those calls you should run the code through a good disassembler (though I guess objdump is pretty much your only option that is free for Solaris) and study the code that provides the parameters (and their origin). Any which way you look at it, doing this well is hard and time consuming work.

Cheers,
Shaun Received on Fri Aug 1 11:51:01 2003