Skip to content

A WIP plugin for radare2 that integrates the taint analysis capabilities of the Binary Analysis Platform (BAP)

Notifications You must be signed in to change notification settings

0xchase/r2taint

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

28 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

r2taint

This plugin is hacky, and it should be rewritten. It adds taint analysis using the Binary Analysis Platform (BAP) from CMU.

r2taint will highlight tainted instructions blue. Instructions tainted by mallocs are highlighted in red.



Command List

| T               Show the help
| Tr[?]           Propogate taint from register and mark tainted instructions
| Trc             Propogate taint from register and mark tainted calls
| Trl             List taints due to register
| Tr-             Remove taints due to register at current seek
| Tr--            Remove all taints due to register sources
| Tp[?]           Propogate taint from pointer and mark tainted instructions
| Tpc             Propogate taint from pointer and mark tainted calls
| Tpl             List taints due to register
| Tp-             Remove taints due to pointer
| Tp--            Remove all taints due to pointer sources
| Tm[?]           Propogate taint from mallocs and mark tainted instructions
| Tmc             Propogate taint from mallocs and mark tainted calls
| Tml             List taints from mallocs
| Tm-             Remove taints due to mallocs
| Tl              List all taint information
| T-              Remove all taint information

Todo

  • Tv: Taint variables of current function or by name
  • Tg???: Various graphing commands for taint information

About

A WIP plugin for radare2 that integrates the taint analysis capabilities of the Binary Analysis Platform (BAP)

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages