Merge pull request #12 from leocstone/master

Improve Ghidra script
2026-06-08 17:35:47 +00:00 · 2022-03-01 14:08:09 -05:00
parent ed12625915 7818633086
commit b046bcee1b
2 changed files with 60 additions and 46 deletions
@@ -1,46 +0,0 @@
-# Output basic block addresses for a binary in the format Winnie-AFL expects:
-# [module_name.exe/.dll]
-# relative virtual address,file offset
-# ...
-# [module #2]
-# rva,file offset
-# ...
-from ghidra.program.model.block import BasicBlockModel
-from ghidra.util.task import TaskMonitor
-from datetime import datetime
-import os
-
-# File to write output to
-output_path = "{}/{}".format(os.getcwd(), datetime.now().strftime("bblist_{}_%d_%m_%y_%H:%M:%S.bb".format(currentProgram.getName())))
-output_file = open(output_path, "w")
-
-bbm = BasicBlockModel(currentProgram)
-blocks = bbm.getCodeBlocks(TaskMonitor.DUMMY)
-block = blocks.next()
-
-# Write module name - for now, just the current program's executable module
-output_file.write("[{}]\n".format(currentProgram.getName()))
-
-# Add up size of sections preceding executable section to get file offsets
-# We assume that the sum of the sizes of each block before the executable
-# block is equal to the file offset of the executable block
-# (this script only works for the first executable section)
-sections = currentProgram.getMemory().getBlocks()
-precedingSectionSize = 0
-exeSectionStart = 0
-for s in sections:
-    if s.isExecute():
-        exeSectionStart = s.getStart().getOffset()
-        break
-    precedingSectionSize += s.getSize()
-    print "Size of section {}:{}".format(s.getName(), s.getSize())
-
-while block:
-    rva = block.minAddress.subtract(currentProgram.getImageBase().getOffset()).getOffset()
-    file_offset = block.minAddress.subtract(exeSectionStart - precedingSectionSize).getOffset()
-    cur_line = "0x{:x},0x{:x}\n".format(rva, file_offset)
-    output_file.write(cur_line)
-    block = blocks.next()
-
-print "Output written to {}".format(output_path)
-
@@ -0,0 +1,60 @@
+# Output basic block addresses for a binary in the format Winnie-AFL expects:
+# [module_name.exe/.dll]
+# relative virtual address,file offset
+# ...
+# [module #2]
+# rva,file offset
+# ...
+#
+from ghidra.program.model.block import BasicBlockModel
+from ghidra.util.task import TaskMonitor
+from ghidra.program.flatapi import FlatProgramAPI
+from datetime import datetime
+import os
+
+def main():
+    # File to write output to
+    output_path = "{}/{}".format(os.getcwd(), datetime.now().strftime("bblist_{}_%d_%m_%y_%H_%M_%S.bb".format(currentProgram.getName())))
+    output_file = open(output_path, "w")
+
+    bbm = BasicBlockModel(currentProgram)
+    blocks = bbm.getCodeBlocks(TaskMonitor.DUMMY)
+    flat_api = FlatProgramAPI(currentProgram)
+
+    # Write module name - for now, just the current program's executable module
+    output_file.write("[{}]\n".format(currentProgram.getName()))
+
+    # Add up size of sections preceding executable section to get file offsets
+    # We assume that the sum of the sizes of each block before the executable
+    # block is equal to the file offset of the executable block
+    # (this script only works for the first executable section)
+    sections = currentProgram.getMemory().getBlocks()
+    precedingSectionSize = 0
+    exeSectionStart = 0
+    for s in sections:
+        if s.isExecute():
+            exeSectionStart = s.getStart().getOffset()
+            break
+        precedingSectionSize += s.getSize()
+        print "Size of section {}:{}".format(s.getName(), s.getSize())
+
+    blocks_skipped = 0
+    while True:
+        block = blocks.next()
+        if not block:
+            break
+        # Skip BBs that already have breakpoints
+        if flat_api.getByte(block.minAddress) == -52:
+            blocks_skipped += 1
+            continue
+        rva = block.minAddress.subtract(currentProgram.getImageBase().getOffset()).getOffset()
+        file_offset = block.minAddress.subtract(exeSectionStart - precedingSectionSize).getOffset()
+        cur_line = "0x{:x},0x{:x}\n".format(rva, file_offset)
+        output_file.write(cur_line)
+
+    print "Skipped {} BBs that already had breakpoints".format(blocks_skipped)
+    print "Output written to {}".format(output_path)
+
+if __name__ == "__main__":
+    main()
+