calaylin / bda Goto Github PK

Hi,

I have a binary I would like to analyse. Could you perhaps describe the order of execution of the files? Since all components have a main, is there a script that invokes all (necessary) files in order?

Kind regards.

Hi,

do you perhaps still have the "bjoern-radare" version of Bjoern available?
Since bjoern-radare is updated to radare2csv, but the available repo seems incomplete/incompatible with the bjoern documentation.

Kind regards.

If you are having trouble with generating abstract syntax trees from decompiled pseudo code using Bjoern fuzzy parser, I recommend to use this docker image: neepl/joern

Command Sequence

0. Get docker image

docker pull neepl/joern

1. Import C pseudo code

docker run -v "</path/to/pseudo/code/>":/code -p 7474:7474 --rm -w /code neepl/joern java -jar /joern/bin/joern.jar .
docker run -d -v "</path/to/pseudo/code/>":/code -p 7474:7474 neepl/joern /var/lib/neo4j/bin/neo4j console

2. Export abstract syntax tree

docker exec <docker_id> /bin/bash -c "echo 'queryNodeIndex(\"type:Function\").id' | joern-lookup -g | joern-plot-ast | joern-astlabel | joern-ast2features > /code/ast_output.dep"

3. Clean up and remove docker container

docker exec <docker_id> /bin/bash -c "rm -r /code/.joernIndex"
docker kill <docker_id>
docker rm <docker_id>