hexhive / firmfuzz Goto Github PK

As declared in the paper, that you can do the taint analysis in php scripts. But I just see you put CI files in IMAGE_DIR like this "cp ./fuzzer/test_mipseb $IMAGE_DIR/test
cp ./fuzzer/ci_file $IMAGE_DIR/"
I wonder how to do taint analysis.

Hello, I follow all the instruction and nothing goes wrong, but every time stop as:
12-01 21:05-fuzzer.util-INFO-[CHECK_AND_ROLL] Sending request to url:http://0.0.0.0:8080
12-01 21:05-fuzzer.util-INFO-[CHECK_AND_ROLL] Code returned 200
12-01 21:05-fuzzer.attack-INFO-[CI] Command Injection Module activated
12-01 21:05-fuzzer.attack-INFO-[CI] Populating CI payloads
I checked every method called, I found 'url_list' is 'None' after 'url_obj.scrape_url(webPage)' is called in fuzzer.py.
Need help, Thanks a lot!!

Hello,

I am trying to setup FirmFuzz. However, I am getting an error when running ./setup.sh

Can you please guide me on how to setup FirmFuzz properly?
Thank you for your help in advance.

Below is the trace that I am having:

Hit:1 http://security.ubuntu.com/ubuntu bionic-security InRelease
Hit:2 http://us.archive.ubuntu.com/ubuntu bionic InRelease
Hit:3 http://us.archive.ubuntu.com/ubuntu bionic-updates InRelease
Hit:4 https://packages.microsoft.com/repos/vscode stable InRelease
Hit:5 http://us.archive.ubuntu.com/ubuntu bionic-backports InRelease
Reading package lists... Done
Building dependency tree
Reading state information... Done
25 packages can be upgraded. Run 'apt list --upgradable' to see them.
W: Target Packages (main/binary-amd64/Packages) is configured multiple times in /etc/apt/sources.list:52 and /etc/apt/sources.list.d/vscode.list:3
W: Target Packages (main/binary-all/Packages) is configured multiple times in /etc/apt/sources.list:52 and /etc/apt/sources.list.d/vscode.list:3
W: Target Translations (main/i18n/Translation-en_US) is configured multiple times in /etc/apt/sources.list:52 and /etc/apt/sources.list.d/vscode.list:3
W: Target Translations (main/i18n/Translation-en) is configured multiple times in /etc/apt/sources.list:52 and /etc/apt/sources.list.d/vscode.list:3
W: Target DEP-11 (main/dep11/Components-amd64.yml) is configured multiple times in /etc/apt/sources.list:52 and /etc/apt/sources.list.d/vscode.list:3
W: Target DEP-11 (main/dep11/Components-all.yml) is configured multiple times in /etc/apt/sources.list:52 and /etc/apt/sources.list.d/vscode.list:3
W: Target DEP-11-icons-small (main/dep11/icons-48x48.tar) is configured multiple times in /etc/apt/sources.list:52 and /etc/apt/sources.list.d/vscode.list:3
W: Target DEP-11-icons (main/dep11/icons-64x64.tar) is configured multiple times in /etc/apt/sources.list:52 and /etc/apt/sources.list.d/vscode.list:3
W: Target CNF (main/cnf/Commands-amd64) is configured multiple times in /etc/apt/sources.list:52 and /etc/apt/sources.list.d/vscode.list:3
W: Target CNF (main/cnf/Commands-all) is configured multiple times in /etc/apt/sources.list:52 and /etc/apt/sources.list.d/vscode.list:3
W: Target Packages (main/binary-amd64/Packages) is configured multiple times in /etc/apt/sources.list:52 and /etc/apt/sources.list.d/vscode.list:3
W: Target Packages (main/binary-all/Packages) is configured multiple times in /etc/apt/sources.list:52 and /etc/apt/sources.list.d/vscode.list:3
W: Target Translations (main/i18n/Translation-en_US) is configured multiple times in /etc/apt/sources.list:52 and /etc/apt/sources.list.d/vscode.list:3
W: Target Translations (main/i18n/Translation-en) is configured multiple times in /etc/apt/sources.list:52 and /etc/apt/sources.list.d/vscode.list:3
W: Target DEP-11 (main/dep11/Components-amd64.yml) is configured multiple times in /etc/apt/sources.list:52 and /etc/apt/sources.list.d/vscode.list:3
W: Target DEP-11 (main/dep11/Components-all.yml) is configured multiple times in /etc/apt/sources.list:52 and /etc/apt/sources.list.d/vscode.list:3
W: Target DEP-11-icons-small (main/dep11/icons-48x48.tar) is configured multiple times in /etc/apt/sources.list:52 and /etc/apt/sources.list.d/vscode.list:3
W: Target DEP-11-icons (main/dep11/icons-64x64.tar) is configured multiple times in /etc/apt/sources.list:52 and /etc/apt/sources.list.d/vscode.list:3
W: Target CNF (main/cnf/Commands-amd64) is configured multiple times in /etc/apt/sources.list:52 and /etc/apt/sources.list.d/vscode.list:3
W: Target CNF (main/cnf/Commands-all) is configured multiple times in /etc/apt/sources.list:52 and /etc/apt/sources.list.d/vscode.list:3
Reading package lists... Done
Building dependency tree
Reading state information... Done
bc is already the newest version (1.07.1-2).
make is already the newest version (4.1-9.1ubuntu1).
gcc is already the newest version (4:7.4.0-1ubuntu2.3).
qemu is already the newest version (1:2.11+dfsg-1ubuntu7.33).
The following packages were automatically installed and are no longer required:
linux-hwe-5.4-headers-5.4.0-42 linux-hwe-5.4-headers-5.4.0-51
Use 'sudo apt autoremove' to remove them.
0 upgraded, 0 newly installed, 0 to remove and 25 not upgraded.
/home/joseph/Programs/FirmFuzz
/opt/cross/mipseb-linux-musl/libexec/gcc/mipseb-linux-musl/5.3.0/cc1: error while loading shared libraries: libmpfr.so.4: cannot open shared object file: No such file or directory
GEN /home/joseph/Programs/FirmFuzz/framework/kernel_firmfuzz/build/mipseb/Makefile
scripts/kconfig/conf -s arch/mips/Kconfig
/opt/cross/mipseb-linux-musl/libexec/gcc/mipseb-linux-musl/5.3.0/cc1: error while loading shared libraries: libmpfr.so.4: cannot open shared object file: No such file or directory
GEN /home/joseph/Programs/FirmFuzz/framework/kernel_firmfuzz/build/mipseb/Makefile
CHK include/linux/version.h
CHK include/linux/utsrelease.h
SYMLINK include/asm -> include/asm-mips
Using /home/joseph/Programs/FirmFuzz/framework/kernel_firmfuzz as source for kernel
CC scripts/mod/empty.o
/opt/cross/mipseb-linux-musl/libexec/gcc/mipseb-linux-musl/5.3.0/cc1: error while loading shared libraries: libmpfr.so.4: cannot open shared object file: No such file or directory
/home/joseph/Programs/FirmFuzz/framework/kernel_firmfuzz/scripts/Makefile.build:229: recipe for target 'scripts/mod/empty.o' failed
make[3]: *** [scripts/mod/empty.o] Error 1
/home/joseph/Programs/FirmFuzz/framework/kernel_firmfuzz/scripts/Makefile.build:365: recipe for target 'scripts/mod' failed
make[2]: *** [scripts/mod] Error 2
/home/joseph/Programs/FirmFuzz/framework/kernel_firmfuzz/Makefile:470: recipe for target 'scripts' failed
make[1]: *** [scripts] Error 2
Makefile:120: recipe for target 'sub-make' failed
make: *** [sub-make] Error 2
/opt/cross/mipsel-linux-musl/libexec/gcc/mipsel-linux-musl/5.3.0/cc1: error while loading shared libraries: libmpfr.so.4: cannot open shared object file: No such file or directory
GEN /home/joseph/Programs/FirmFuzz/framework/kernel_firmfuzz/build/mipsel/Makefile
scripts/kconfig/conf -s arch/mips/Kconfig
/opt/cross/mipsel-linux-musl/libexec/gcc/mipsel-linux-musl/5.3.0/cc1: error while loading shared libraries: libmpfr.so.4: cannot open shared object file: No such file or directory
GEN /home/joseph/Programs/FirmFuzz/framework/kernel_firmfuzz/build/mipsel/Makefile
CHK include/linux/version.h
CHK include/linux/utsrelease.h
SYMLINK include/asm -> include/asm-mips
Using /home/joseph/Programs/FirmFuzz/framework/kernel_firmfuzz as source for kernel
CC scripts/mod/empty.o
/opt/cross/mipsel-linux-musl/libexec/gcc/mipsel-linux-musl/5.3.0/cc1: error while loading shared libraries: libmpfr.so.4: cannot open shared object file: No such file or directory
/home/joseph/Programs/FirmFuzz/framework/kernel_firmfuzz/scripts/Makefile.build:229: recipe for target 'scripts/mod/empty.o' failed
make[3]: *** [scripts/mod/empty.o] Error 1
/home/joseph/Programs/FirmFuzz/framework/kernel_firmfuzz/scripts/Makefile.build:365: recipe for target 'scripts/mod' failed
make[2]: *** [scripts/mod] Error 2
/home/joseph/Programs/FirmFuzz/framework/kernel_firmfuzz/Makefile:470: recipe for target 'scripts' failed
make[1]: *** [scripts] Error 2
Makefile:120: recipe for target 'sub-make' failed
make: *** [sub-make] Error 2
/home/joseph/Programs/FirmFuzz
make[1]: Entering directory '/home/joseph/Programs/FirmFuzz/framework/kernel_firmfuzz_armel/build/armel'
GEN ./Makefile
scripts/kconfig/conf --silentoldconfig Kconfig
CHK include/config/kernel.release
GEN ./Makefile
CHK include/generated/uapi/linux/version.h
CHK include/generated/utsrelease.h
Using /home/joseph/Programs/FirmFuzz/framework/kernel_firmfuzz_armel as source for kernel
CC scripts/mod/empty.o
CC scripts/mod/devicetable-offsets.s
/opt/cross/arm-linux-musleabi/libexec/gcc/arm-linux-musleabi/5.3.0/cc1: error while loading shared libraries: libmpfr.so.4: cannot open shared object file: No such file or directory
/home/joseph/Programs/FirmFuzz/framework/kernel_firmfuzz_armel/scripts/Makefile.build:258: recipe for target 'scripts/mod/empty.o' failed
make[3]: *** [scripts/mod/empty.o] Error 1
make[3]: *** Waiting for unfinished jobs....
/opt/cross/arm-linux-musleabi/libexec/gcc/arm-linux-musleabi/5.3.0/cc1: error while loading shared libraries: libmpfr.so.4: cannot open shared object file: No such file or directory
/home/joseph/Programs/FirmFuzz/framework/kernel_firmfuzz_armel/scripts/Makefile.build:153: recipe for target 'scripts/mod/devicetable-offsets.s' failed
make[3]: *** [scripts/mod/devicetable-offsets.s] Error 1
/home/joseph/Programs/FirmFuzz/framework/kernel_firmfuzz_armel/scripts/Makefile.build:403: recipe for target 'scripts/mod' failed
make[2]: *** [scripts/mod] Error 2
make[2]: *** Waiting for unfinished jobs....
/home/joseph/Programs/FirmFuzz/framework/kernel_firmfuzz_armel/Makefile:555: recipe for target 'scripts' failed
make[1]: *** [scripts] Error 2
make[1]: Leaving directory '/home/joseph/Programs/FirmFuzz/framework/kernel_firmfuzz_armel/build/armel'
Makefile:146: recipe for target 'sub-make' failed
make: *** [sub-make] Error 2

while I run the "./run_batch_fs.sh \images/",it throws an error.
cp: cannot stat '/home/FirmFuzz/framework/scripts/devfs_stubs_orig.c': No such file or directory
cp: cannot stat '/home/FirmFuzz/framework/scripts/devfs_stubs_orig.c': No such file or directory

Copying default device directory
cp: cannot stat '/home/FirmFuzz/framework/scripts/mapper/dev.tgz': No such file or directory

how can i solve it?thank you!

After reading the paper,I am looking forward to the source code.When will it be released?
Thx ；）