利用angr去除控制流平坦化的工具:https://github.com/cq674350529/deflat
docker run -v /tmp/dist/:/root/bin --name deflat -it iyzyi/deflat /bin/bash
路径映射可以随便改。
python3 deflat.py -f /root/bin/libcalculate.so --addr 0x41FEA0
-f 二进制文件 --addr 目标函数开始地址

http://blog.iyzyi.com/index.php/archives/1374/#deflat%E9%95%9C%E5%83%8F
FROM ubuntu
USER root
RUN apt-get update && \
apt-get install -y python3-pip && \
apt-get install -y git
# 安装angr. 项目维护者称其测试环境为angr 8.19.4.5
RUN pip3 install angr==8.19.4.5
RUN cd /root && \
git clone https://github.com/iyzyi/deflat.git
WORKDIR /root/deflat/flat_control_flow
Content type
Image
Digest
Size
313.5 MB
Last updated
over 6 years ago
docker pull iyzyi/deflat