CTF-All-In-One/doc/8.45_ramblr.md
2018-08-05 17:43:10 +08:00

12 lines
886 B
Markdown
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# 8.45 Ramblr: Making Reassembly Great Again
[paper](https://www.cs.ucsb.edu/~vigna/publications/2017_NDSS_Ramblr.pdf)
[slides](http://wp.internetsociety.org/ndss/wp-content/uploads/sites/25/2017/09/ndss2017_10-5-wang_slides.pdf)
[video](https://www.youtube.com/watch?v=_BIamPJE8EQ)
## 简介
静态二进制重写在逆向工程中有许多重要的应用例如补丁、代码重用和插桩。Reassembly 就是静态二进制重写的一种有效方法Reassembly is the process of assembling a set of instructions obtained through *disassembly* and which were certainly patched or modified
本文提出了一种新的 binary reassembling 的方法,并实现了工具 Ramblr。该方法首先将原始的二进制文件反汇编正确识别符号和预期的跳转目标插入必要的补丁然后将程序集重新组装到修补后的二进制文件中。