Using Binary Ninja's API for creating dynamic analysed binary dataset #1995
Answered
by
psifertex
BluePython339
asked this question in
General
-
|
Hey guys, i'm doing research (thesis) into dynamically analysing binaries to detect vulnerabilites using a neural net. However i've been having trouble finding a decompiler and analyser that i can script so that i can create the dataset / make a proof of concept. Thanks in advance !!! |
Beta Was this translation helpful? Give feedback.
Answered by
psifertex
Sep 18, 2020
Replies: 1 comment 2 replies
-
|
Yes, BN is perfect for that. Here's a quick sample of using the API via a headless script to demonstrate the basics: #!/usr/bin/env python3
import binaryninja
import glob
import argparse
parser = argparse.ArgumentParser(description='Dump CFG and AST for function start')
parser.add_argument("files", metavar="path", type=str,
help="Path to files to be analyzed, can use wildcards")
args = parser.parse_args()
files = glob.iglob(args.files)
for file in files:
try:
with binaryninja.open_view(file, 'r') as bv:
print(f'AST for {file} and the entry_function:')
ast = '\n'.join(map(str, bv.entry_function.hlil.root.lines))
print(f'{ast}')
print('Number of Assembly Basic Blocks: :')
print(f'{len(bv.entry_function.basic_blocks)}')
print('Number of HLIL Basic Blocks: :')
print(f'{len(bv.entry_function.hlil.basic_blocks)}')
except IOError:
print(f'{file} does not appear to be a valid file for analysis')Note that you can use a modified form of that script in the Personal license as well, just have to run it inside the UI. The good news is if you're a full-time student, our student discount applies to commercial licenses as well. Here's the sample output from |
Beta Was this translation helpful? Give feedback.
2 replies
-
|
Hey, wow, this is a powerfull tool, damn, I'm going to write an email to the facultiy if they can finance a commercial licence under my name (as a full time student). Thanks for the help!!! |
Beta Was this translation helpful? Give feedback.
-
|
You're very welcome. In the meantime, you can check out cloud which doesn't have the API but just to see what kind of results our analysis generates out of the box, and peruse the API docs I linked above to get a feel for what else it can do. There's a lot more under the hood including constant propagation, value_set analysis, SSA forms, and even the ability to inform those yourself! |
Beta Was this translation helpful? Give feedback.
Answer selected by
psifertex
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Yes, BN is perfect for that. Here's a quick sample of using the API via a headless script to demonstrate the basics: