dod-cyber-crime-center / dragodis Goto Github PK

View Code? Open in Web Editor NEW

40.0 40.0 7.0 472 KB

Dragodis is a Python framework which allows for the creation of universal disassembler scripts.

License: Other

Python 99.48% C 0.52%

automation ghidra ida malware-analysis malware-automation python

dragodis's People

Contributors

Stargazers

Watchers

Forkers

ddash-ct kchason ethicalsecurity-agency jeffmeisterj codemasters1 lersi clayne

dragodis's Issues

Disassembler for Shellcode using Ghidra

While IDA will default to x86 Assembly for provided shellcode, when attempting to open shellcode using Ghidra as the backend disassembler, the process will crash, since Ghidra does not know how to read the input file by default.

When invoking the disassembler, it would be helpful to have the ability to provide a language to use for opening the file, such as x86 or x64 assembly.

Enable option to set file type

For IDA, there is a -T command line option (https://hex-rays.com/products/ida/support/idadoc/417.shtml) which enables setting the specific file type. This can assist with shellcode analysis, such as situations when the file type is incorrectly determined (e.g. Esp8266RomImage vs Binary).

While setting the processor type works in this circumstance, the incorrect file type thwarts desired analysis.

Uncertain of the equivalent in Ghidra

Recommend Projects