panda icon indicating copy to clipboard operation
panda copied to clipboard

plugin taint2

Open xri-wen opened this issue 3 years ago • 4 comments

Whenever I use the plugin related to taint2(ida_taint2、tained_branch、tainted_net、serial_taint), (./panda/build/i386-softmmu/panda-system-i386 -m 4096 -monitor stdio -show-cursor -device usb-tablet -machine usb=on -replay 1101218 -panda stringsearch:str="kkkkkk" -panda tstringsearch -panda ida_taint2

./panda/build/i386-softmmu/panda-system-i386 -m 4096 -monitor stdio -show-cursor -device usb-tablet -machine usb=on -replay 1101218 -panda stringsearch:str="kkkkkk" -panda tstringsearch -panda tainted_net:query_outgoing_network=ture,file=kkkkkk_tnss.csv

./panda/build/i386-softmmu/panda-system-i386 -m 4096 -monitor stdio -show-cursor -device usb-tablet -machine usb=on -replay 1101218 -panda stringsearch:str="kkkkkk" -panda tstringsearch -panda tainted_branch -pandalog tsearhkkkkkk.plog

./panda/build/i386-softmmu/panda-system-i386 -m 4096 -monitor stdio -show-cursor -device usb-tablet -machine usb=on -replay 1101218 -panda stringsearch:str="kkkkkk" -panda tstringsearch -panda serial_taint )

I always get an error PNADA[core]:FAILED to load required plugin taint2 from ./panda/build/i386-softmmu/panda/plugins/panda_taint2.so

xri-wen avatar Jan 03 '22 13:01 xri-wen

Is the panda_taint2.so file in your file system at the location given? Did you build taint2?

lacraig2 avatar Jan 04 '22 19:01 lacraig2

2022-01-05 15-36-55 的螢幕擷圖 Is the panda_taint2.so file in your file system at the location given?->yes Did you build taint2?-> I think I have already built the whole panda with the code bellow cd panda mkdir -p build && cd build ../build.sh

The other plugins are work!

xri-wen avatar Jan 05 '22 07:01 xri-wen

That's odd. I would recommend debugging PANDA with gdb, break on this function, and see why exactly it's returning NULL.

It's likely that one of the environment variables it depends on is messed up in some way.

lacraig2 avatar Jan 05 '22 17:01 lacraig2

Ok, I hope I have enough time and ability to deal with it. Thanks a lot!

xri-wen avatar Jan 06 '22 14:01 xri-wen