lwerdna

/*

## loctool: (libopcode tool) programmatically call the same disassembler objdump uses
* depends: libiberty, libbfd, libopcodes all from binutils

## setup
* get [binutils 2.30](https://ftp.gnu.org/gnu/binutils/binutils-2.30.tar.gz) and decompress.
* enter the libiberty directory, `./configure && make` then `cp libiberty.a /usr/local/lib`
* enter the bfd directory, edit configure and set all_targets=true then `./configure && make && make install`
* enter the opcodes directory, edit configure and set all_targets=true then `./configure && make && make install`

lwerdna

#!/usr/bin/env python

# wrap a flat file as the .text section of an ELF file
# resulting file is simple:
# ------------------------
# ELF header
# ------------------------
# program header
# ------------------------
# .text section

lwerdna

// opening classifier from: /tmp/tmp.pickle
// n_nodes: 359
// n_leaves: 180
// max_depth: 25
if(byte1 <= 127)
 if(byte1 <= 63)
  if(b8 <= 0)
   if(b9 <= 0)
    if(b10 <= 0)
     if(nybble1 <= 7)

lwerdna

# python stuff
import codecs

# binja stuff
from binaryninja import binaryview, BinaryDataNotification
from binaryninjaui import View, ViewType, ViewFrame, HexEditor

# binja UI stuff
from PySide2.QtCore import Qt
from PySide2.QtWidgets import QScrollArea

lwerdna

#!/usr/bin/env python

def chi_square(a, b):
	# https://github.com/opencv/opencv/blob/master/modules/imgproc/src/histogram.cpp
	# sum(i=1,n, (x_i - y_i)^2 / (x_i+y_i) )

	assert len(a)==len(b)
	result = 0;
	for i in range(len(a)):
		numerator = a[i]-b[i]

lwerdna

#!/usr/bin/env python
#
# command-line binary ninja disassembler

import sys
import binaryninja

GREEN = '\x1B[32m'
NORMAL = '\x1B[0m'

lwerdna

#!/usr/bin/env python
#
# command-line binary ninja disassembler

import sys
import binaryninja
from binaryninja import core
from binaryninja import binaryview
from binaryninja import lowlevelil

lwerdna

#!/usr/bin/env python
#
# convert images to Binary Ninja "feature map" images
#
# please share enhancements and cool images you make with andrewl on binja slack
#
# instructions (requires ImageMagick and Netwide Assembler (nasm)):
#
# resize to 128 pixel width:
# $ convert -resize 128 input.png output.png

lwerdna

#!/usr/bin/env python
#
# python version of Z0MBIE's PE_STAT for opcode frequency statistics
# http://z0mbie.dreamhosters.com/opcodes.html

import sys
import binaryninja
from collections import defaultdict

opc2count = defaultdict(lambda:0)

lwerdna

#!/usr/bin/env python

import re
import os
import sys
from struct import pack, unpack

#------------------------------------------------------------------------------
# ELF STUFF
#------------------------------------------------------------------------------