📚 OpenRCE is preserved as a read-only archive. Launched at RECon Montreal in 2005. Registration and posting are disabled.








Flag: Tornado! Hurricane!

 Forums >>  Brainstorms - General  >>  Tools for Finding Buffer Overflow Errors

Topic created on: July 19, 2007 10:51 CDT by stahl .

Hello

i am searching for existing tools and methods (or maybe IDA Plugins) that can be used to find buffer overflow errors in binary programs. The focus is put on statical analysis, but dynamical analysis programs would be interesting also.

I have found lots of programs aimed at finding buffer overdlow errors in source code. But i am missing tools for finding these errors in binary programs.

Any links and suggestions are welcome. Thanks a lot!

By
stahl

  frankboldewin     July 19, 2007 13:36.19 CDT
try this one:

http://www.hbgary.com/faultfinder.shtml

kind in mind it's not free.

additionally i like pedrams paimei and sabres binnavi for bug hunting.

cheers,
frank

  stahl   July 19, 2007 13:47.10 CDT
thank you. i found references to a tool called
SmartRisk Analyzer

sadly they sold it to symmantec. it seems to me the tool is not available anymore... so are the paperes etc.

any more suggestions, anybody?

  jms     July 19, 2007 14:07.02 CDT
Didn't halvar put someting out awhile ago? BugScam? The other thing you can do is learn some IDAPython, cross-refernce all calls to danger functions, and then see what gets pushed to the stack previous to those calls. It would be like 20 - 30 lines of python. BUT....this won't help you with things like heap corruption :)

  stahl   July 19, 2007 14:41.31 CDT
thank you jms. my goal is to collect and evaluate different existing tools which can find buffer overflow errors in binaries statically. (while i am not unintersted in dynamic tools, too)



i am already a little familiar with idapython:-)


it seems to me there aren't that many existing tools?
i found out about hbgary inspector. it seems it does some static analysis. well sadly it is not free and no demo available. (i am student and cannot afford to buy a copy. i don't want to use it commercial, just to do the studies...)

anyone, other suggestions for existing tools?

  MohammadHosein     July 19, 2007 16:27.07 CDT
depending on your target platforms
Parasoft's Insure++ would be one of your choices , Valgrind would be another one .

  Caboose     July 19, 2007 18:13.01 CDT
You could try BugTrapper (it's pretty hard to find these days, I hosted it). Keep in mind it's not free, but CrackZ wrote an article on how to de-protect it.

Note: Registration is required to post to the forums.

There are 31,328 total registered users.


Recently Created Topics
[help] Unpacking VMP...
Mar/12
Reverse Engineering ...
Jul/06
let 'IDAPython' impo...
Sep/24
set 'IDAPython' as t...
Sep/24
GuessType return une...
Sep/20
About retrieving the...
Sep/07
How to find specific...
Aug/15
How to get data depe...
Jul/07
Identify RVA data in...
May/06
Question about memor...
Dec/12


Recent Forum Posts
Finding the procedur...
rolEYder
Question about debbu...
rolEYder
Identify RVA data in...
sohlow
let 'IDAPython' impo...
sohlow
How to find specific...
hackgreti
Problem with ollydbg
sh3dow
How can I write olly...
sh3dow
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n


Recent Blog Entries
halsten
Mar/14
Breaking IonCUBE VM

oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

oleavr
Aug/27
CryptoShark: code tracer ba...

oleavr
Jun/25
Build a debugger in 5 minutes

More ...


Recent Blog Comments
nieo on:
Mar/22
IAT Patcher - new tool for ...

djnemo on:
Nov/17
Kernel debugger vs user mod...

acel on:
Nov/14
Kernel debugger vs user mod...

pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit