📚 OpenRCE is preserved as a read-only archive. Launched at RECon Montreal in 2005. Registration and posting are disabled.








Flag: Tornado! Hurricane!

 Forums >>  Brainstorms - General  >>  Any web-based reversing tools?

Topic created on: February 6, 2009 10:12 CST by MazeGen .

I'm looking for an on-line x86 disassembler, accessible by web browser. Something like I can create account, I can upload files, I can create a working group and invite my friends from the other side of the globe to join and reverse a target together.

The UI should be a bit advanced - it should be able to let me ask for basic code analysis. I'd like to have clickable jump labels and other simple navigation.

I know of PVPHP (http://pvdasm.reverse-engineering.net/index.php?Section=8), but it is too simple - no navigation, no analysis, I can't create an account etc.

  trufae   February 6, 2009 12:07.25 CST
As you expect radare can provide a solution for this. Actually there are three proof of concepts of web interfaces for radare. The first one (raweb) was written by me two years ago and was based on a very simple static analysis. You can find the source code in the distribution tarball.

Here's an online demo:

  http://news.nopcode.org/raweb/

The second one was never published or released and the last one is actually pretty work in progress and have some race conditions because of the non-multiuser approach, but its funny to give it a try.

None of them support user sessions of file upload because they are just proof of concepts at the moment :P

The other interface was written few days ago in few hours in MCMS (a web language designed by mandingo). Its basically a web interface for the 'rsc daemon-cmd' tool that comes with radare and allows to remotelly run commands and get the result on the other side.

  http://www.yoire.com/m/radare/radare.mcms.cgi

You can get the source with /showSource and the config with /showConfig.

This online demo uses AJAX and interacts with a running radare daemon that is debugging a /bin/ls. The interface allows you to run some restricted radare commands (for security reasons) and add comments, perform analysis, view in disassembly, hexa, show registers, etc..

If you are really interested in adding sessions and providing a decent interface for it, you can contact me, or just take the source and play with it :)

There are script to import data from IDA into radare, but I think that
the best approach for this will probably be to use an SQL backend with some event hooks, at least it will provide a faster interface and wouldnt be hard to write a chroot or vm-based environments to securely provide a multi-user,program collaborative web interface.

This is why this stuff is just PoCs :) native interfaces are always better for displaying assembly than a browser..

Enjoy

--pancake

  MazeGen     February 9, 2009 06:20.32 CST
Radare seems to be great tool. I can't image the amout of work you guys spent on that.

The PoCs are interesting, thanks for them.

I wonder why there doesn't seem to be working web service allowing team RE remote work on a target, at least static without debugging etc. Noone is really interested?

  igorsk     February 9, 2009 13:15.37 CST
This was mentioned on DailyDave recently:
http://dradis.nomejortu.com/

Note: Registration is required to post to the forums.

There are 31,328 total registered users.


Recently Created Topics
[help] Unpacking VMP...
Mar/12
Reverse Engineering ...
Jul/06
let 'IDAPython' impo...
Sep/24
set 'IDAPython' as t...
Sep/24
GuessType return une...
Sep/20
About retrieving the...
Sep/07
How to find specific...
Aug/15
How to get data depe...
Jul/07
Identify RVA data in...
May/06
Question about memor...
Dec/12


Recent Forum Posts
Finding the procedur...
rolEYder
Question about debbu...
rolEYder
Identify RVA data in...
sohlow
let 'IDAPython' impo...
sohlow
How to find specific...
hackgreti
Problem with ollydbg
sh3dow
How can I write olly...
sh3dow
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n


Recent Blog Entries
halsten
Mar/14
Breaking IonCUBE VM

oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

oleavr
Aug/27
CryptoShark: code tracer ba...

oleavr
Jun/25
Build a debugger in 5 minutes

More ...


Recent Blog Comments
nieo on:
Mar/22
IAT Patcher - new tool for ...

djnemo on:
Nov/17
Kernel debugger vs user mod...

acel on:
Nov/14
Kernel debugger vs user mod...

pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit