差異處
這裏顯示兩個版本的差異處。
下次修改 | 前次修改 | ||
cpp:wdm:security:eclypsium_screwed-drivers_detection [2019/09/04 10:56] tony 建立 |
cpp:wdm:security:eclypsium_screwed-drivers_detection [2023/06/25 09:48] (目前版本) |
||
---|---|---|---|
行 5: | 行 5: | ||
===== How to? ===== | ===== How to? ===== | ||
==== Installation ==== | ==== Installation ==== | ||
- | 在Eclypsium的[[https://github.com/eclypsium/Screwed-Drivers/tree/master/Detection|GitHub]]上,附有安裝教學,首先是安裝套件(使用Ubuntu 16.10): | + | 在Eclypsium的[[https://github.com/eclypsium/Screwed-Drivers/tree/master/Detection|GitHub]]上,附有安裝教學,首先是安裝套件: |
<code bash> | <code bash> | ||
udo apt-get install python3-dev libffi-dev build-essential virtualenvwrapper radare2 binutils | udo apt-get install python3-dev libffi-dev build-essential virtualenvwrapper radare2 binutils | ||
</code> | </code> | ||
- | 然而在我安裝套件後,發生mkvirtualenv找不到的問題;經過google,找到[[https://segmentfault.com/a/1190000012030061|這篇文章]],在執行完以下指令後,就能夠執行mkvirtualenv。首先是找尋virtualenvwrapper.sh: | + | 然而在我安裝套件後,發生mkvirtualenv找不到的問題。針對這個問題有兩個方法,一個方法是重新啟動terminal,另外一個則是參考[[https://segmentfault.com/a/1190000012030061|這篇文章]]內的方式,匯入virtualenvwrapper.sh的function。最後就是建立模擬環境: |
- | <code bash> | + | |
- | find / -name virtualenvwrapper.sh | + | |
- | </code> | + | |
- | 我在Ubuntu 16.10上,找到的路徑是/usr/share/virtualenvwrapper/virtualenvwrapper.sh;接者修改/etc/profile,加入這兩行: | + | |
- | <code bash> | + | |
- | export WORKON_HOME=/root/virtualenvs | + | |
- | source /usr/share/virtualenvwrapper/virtualenvwrapper.sh | + | |
- | </code> | + | |
- | 這樣之後只要執行source /etc/profile,就可以將這個script的function導入執行環境中。最後就是建立模擬環境: | + | |
<code bash> | <code bash> | ||
mkvirtualenv --python=$(which python3) angr && pip install angr && pip install r2pipe | mkvirtualenv --python=$(which python3) angr && pip install angr && pip install r2pipe | ||
</code> | </code> | ||
+ | ==== Run ==== | ||
+ | 接下來就是執行掃秒,可以參考下圖執行結果:\\ | ||
+ | {{:cpp:wdm:security:scan_driver_on_ubuntu18.04.png|}} | ||
+ | ==== Other ==== | ||
+ | 起初我是在Ubuntu 16.10安裝並執行,但執行過程中會發生問題:\\ | ||
+ | {{:cpp:wdm:security:scan_driver_on_ubuntu16.10.png|}}\\ | ||
+ | \\ | ||
+ | 懷疑與Python版本是3.5有關,改用Ubuntu 18.04的Python3.6能夠正常執行我就直接忽略了。 | ||
===== Reference ===== | ===== Reference ===== | ||
* [[https://github.com/eclypsium/Screwed-Drivers/tree/master/Detection|Screwed-Drivers GitHub Repository]] | * [[https://github.com/eclypsium/Screwed-Drivers/tree/master/Detection|Screwed-Drivers GitHub Repository]] | ||
* [[https://segmentfault.com/a/1190000012030061|virtualenv和virtualenvwrapper介绍、安装和使用]] | * [[https://segmentfault.com/a/1190000012030061|virtualenv和virtualenvwrapper介绍、安装和使用]] | ||
+ | ===== ===== | ||
+ | ---- | ||
+ | \\ | ||
+ | ~~DISQUS~~ | ||