Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

extract import / export symbols from stripped elf binaries #2142

Merged
merged 27 commits into from
Jun 18, 2024

Commits on Jun 10, 2024

  1. closes mandiant#2096

    ygasparis committed Jun 10, 2024
    Configuration menu
    Copy the full SHA
    d74b782 View commit details
    Browse the repository at this point in the history

Commits on Jun 11, 2024

  1. Update CHANGELOG.md

    Co-authored-by: Willi Ballenthin <wballenthin@google.com>
    ygasparis and williballenthin committed Jun 11, 2024
    Configuration menu
    Copy the full SHA
    33b2e78 View commit details
    Browse the repository at this point in the history

Commits on Jun 18, 2024

  1. add test case

    ygasparis committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    ac69245 View commit details
    Browse the repository at this point in the history
  2. features: add aarch64 arch (mandiant#2144)

    * features: add aarch64 arch
    williballenthin authored and ygasparis committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    bb41f23 View commit details
    Browse the repository at this point in the history
  3. relax pyproject dependency versions and introduce requirements.txt (m…

    …andiant#2132)
    
    * relax pyproject dependency versions and introduce requirements.txt
    
    closes mandiant#2053
    closes mandiant#2079
    
    * pyproject: document dev/build profile dependency policies
    
    * changelog
    
    * doc: installation: describe requirements.txt usage
    
    * pyproject: don't use dnfile 0.15 yet
    
    ---------
    
    Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
    2 people authored and ygasparis committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    122342e View commit details
    Browse the repository at this point in the history
  4. build(deps): bump pyinstaller from 6.7.0 to 6.8.0 (mandiant#2138)

    Bumps [pyinstaller](https://github.com/pyinstaller/pyinstaller) from 6.7.0 to 6.8.0.
    - [Release notes](https://github.com/pyinstaller/pyinstaller/releases)
    - [Changelog](https://github.com/pyinstaller/pyinstaller/blob/develop/doc/CHANGES.rst)
    - [Commits](pyinstaller/pyinstaller@v6.7.0...v6.8.0)
    
    ---
    updated-dependencies:
    - dependency-name: pyinstaller
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored and ygasparis committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    050a956 View commit details
    Browse the repository at this point in the history
  5. FEAT(capa2sarif) Add SARIF conversion script from json output (mandia…

    …nt#2093)
    
    * feat(capa2sarif): add new sarif conversion script converting json output to sarif schema, update dependencies, and update changelog
    
    * fix(capa2sarif): removing copy and paste transcription errors
    
    * fix(capa2sarif): remove dependencies from pyproject toml to guarded import statements
    
    * chore(capa2sarif): adding node in readme specifying dependency and applied auto formatter for styling
    
    * style(capa2sarif): applied import sorting and fixed typo in invocations function
    
    * test(capa2sarif): adding simple test for capa to sarif conversion script using existing result document
    
    * style(capa2sarif): fixing typo in version string in usage
    
    * style(capa2sarif): isort failing due to reordering of typehint imports
    
    * style(capa2sarif): fixing import order as isort on local machine was not updating code
    
    ---------
    
    Co-authored-by: ReversingWithMe <ryanv@rewith.me>
    Co-authored-by: Willi Ballenthin <wballenthin@google.com>
    3 people authored and ygasparis committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    6adfc54 View commit details
    Browse the repository at this point in the history
  6. build(deps): bump setuptools from 69.5.1 to 70.0.0 (mandiant#2135)

    Bumps [setuptools](https://github.com/pypa/setuptools) from 69.5.1 to 70.0.0.
    - [Release notes](https://github.com/pypa/setuptools/releases)
    - [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
    - [Commits](pypa/setuptools@v69.5.1...v70.0.0)
    
    ---
    updated-dependencies:
    - dependency-name: setuptools
      dependency-type: direct:production
      update-type: version-update:semver-major
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored and ygasparis committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    9792400 View commit details
    Browse the repository at this point in the history
  7. dnfile 0.15.0 changed API (mandiant#2037)

    * dnfile 0.15.0 changed API
    
    * deduplicate str() calls and isort fixes
    
    * revert accidental change to imports ordering
    
    * add table variable annotation
    
    ---------
    
    Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
    Co-authored-by: mr-tz <moritz.raabe@mandiant.com>
    3 people authored and ygasparis committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    d75ccc2 View commit details
    Browse the repository at this point in the history
  8. Sync capa rules submodule

    capa-bot authored and ygasparis committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    f587f57 View commit details
    Browse the repository at this point in the history
  9. Sync capa-testfiles submodule

    capa-bot authored and ygasparis committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    9ca136d View commit details
    Browse the repository at this point in the history
  10. fix black

    mr-tz authored and ygasparis committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    a556139 View commit details
    Browse the repository at this point in the history
  11. fix mypy issues

    mr-tz authored and ygasparis committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    73ea044 View commit details
    Browse the repository at this point in the history
  12. add scripts section

    mr-tz authored and ygasparis committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    fccdfcd View commit details
    Browse the repository at this point in the history
  13. add capa2sarif dependencies

    mr-tz authored and ygasparis committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    20b9e28 View commit details
    Browse the repository at this point in the history
  14. add scripts to install step

    mr-tz authored and ygasparis committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    7b373b1 View commit details
    Browse the repository at this point in the history
  15. Apply suggestions from code review

    Co-authored-by: Willi Ballenthin <wballenthin@google.com>
    2 people authored and ygasparis committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    8460c65 View commit details
    Browse the repository at this point in the history
  16. add scripts dependency group

    mr-tz authored and ygasparis committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    6e59c6e View commit details
    Browse the repository at this point in the history
  17. ELF: Detect OS from Go binaries (mandiant#1987)

    * elf: read segment memory size
    
    * elf: add routine to read mapped memory
    
    * elf: better detect OS for binaries compiled by Go
    
    * elf: guess OS from Go source filenames
    
    * changelog
    
    * elf: mypy
    
    * merge
    
    * elf: add OS detection based on vDSO strings
    
    * elf: document VTGrep searches
    
    * elf: describe further technique to identify Go binaries
    
    * elf: search for `.go.buildinfo` section via @yelhamer
    
    * black
    
    * elf: detect Alpine Linux ident
    
    * elf: log interest symtab entries
    
    * tests: add test for OS detection by Go buildinfo
    
    * loader: handle missing viv modules
    
    * pre-commit: run deptry before tests (which are slow)
    
    * loader: describe removing viv symbolic switch solver
    
    * pyproject: add PyGithub for deptry
    
    * black
    williballenthin authored and ygasparis committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    c6d976e View commit details
    Browse the repository at this point in the history
  18. build(deps): bump ruff from 0.4.7 to 0.4.8 (mandiant#2139)

    Bumps [ruff](https://github.com/astral-sh/ruff) from 0.4.7 to 0.4.8.
    - [Release notes](https://github.com/astral-sh/ruff/releases)
    - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
    - [Commits](astral-sh/ruff@v0.4.7...v0.4.8)
    
    ---
    updated-dependencies:
    - dependency-name: ruff
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    Co-authored-by: Willi Ballenthin <wballenthin@google.com>
    2 people authored and ygasparis committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    91ed13e View commit details
    Browse the repository at this point in the history
  19. Sync capa rules submodule

    capa-bot authored and ygasparis committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    a044475 View commit details
    Browse the repository at this point in the history
  20. bump to v7.1.0

    mr-tz authored and ygasparis committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    b2d85e0 View commit details
    Browse the repository at this point in the history
  21. Configuration menu
    Copy the full SHA
    9697f79 View commit details
    Browse the repository at this point in the history
  22. Configuration menu
    Copy the full SHA
    50c2775 View commit details
    Browse the repository at this point in the history
  23. Sync capa-testfiles submodule

    capa-bot authored and ygasparis committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    a8d4828 View commit details
    Browse the repository at this point in the history
  24. update changelog

    ygasparis committed Jun 18, 2024
    Configuration menu
    Copy the full SHA
    2570fa2 View commit details
    Browse the repository at this point in the history
  25. Configuration menu
    Copy the full SHA
    a535afa View commit details
    Browse the repository at this point in the history