[ squeeze ]
[ sid ]
パッケージ: elfsh (1:0.8a25-3 など)
The ELF shell
The ELF shell is an interactive, modular, and scriptable ELF (Executable & Linking Format) machine for static binary instrumentation of executable files, shared libraries and relocatable ELF objects. Its innovative features make it usable by reverse engineers and security analysts for embedded analysis using compiled C code extensions of binary programs. It features execution flow redirection that allows for dynamic analyzers generation and binary-level testing. ELFsh is compatible with kernel hardening patches : It can perform operational modifications on non-executable stack and heap based systems, and this for multiple architectures.
The main features of the ELF shell are :
* Injection of new compiled C code into a binary executable or dynamic library file. * Function redirection for all kind of functions. * Relinking of dynamic or static binary files to add all sorts of dependences without moving the original address space. * Full access in read/write mode to the ELF data structures from the scripting language, including but not limited to: - The Global Offset Table (.got) section - The dynamic linking section (.dynamic) - The constructors (.ctors) and destructors (.dtors) array - The ELF GNU version tables - The ELF interpreter (.interp) section - ELF dynamic and static symbol tables (.dynsym and .symtab) - ELF relocation tables (.rel(a).*) - ELF Hash table (.hash) - All other sections in raw read/write mode using hexadecimal strings
その他の elfsh 関連パッケージ
|
|
|
-
- dep: libasm0
- Disassembling engine provided to the ERESI framework
-
- dep: libaspect0
- The ERESI aspect library
-
- dep: libc6 (>= 2.10) [hppa]
- Embedded GNU C Library: Shared libraries
以下のパッケージによって提供される仮想パッケージでもあります: libc6-udeb
- dep: libc6 (>= 2.5-5) [m68k]
-
- dep: libc6.1 (>= 2.4) [alpha]
- Embedded GNU C Library: Shared libraries
以下のパッケージによって提供される仮想パッケージでもあります: libc6.1-udeb
-
- dep: libedfmt0
- The ERESI debug format library
-
- dep: libelfsh0
- The ELF shell library
-
- dep: libetrace0
- The ERESI tracer library
-
- dep: libmjollnir0
- Flow analysis and fingerprinting component of the ERESI framework
-
- dep: libncurses5 (>= 5.6+20071006-3)
- shared libraries for terminal handling
-
- dep: libreadline5 (>= 5.2)
- GNU readline and history libraries, run-time libraries
-
- dep: librevm0
- The Reverse Engineering Vector Machine
-
- dep: libstderesi0
- The ERESI standard library
-
- dep: libui0
- ERESI ユーザインターフェース