gman0064/chisel
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Tool for decompiling *nix ELF programs for binary analysis
17 Commits 1 Branch 0 Tags 95 KiB
Shell 57%
Rust 41.9%
C 0.7%
Assembly 0.4%
master
Go to file
Garrett Dickinson c507d6c028 Update README.md
2023-04-27 14:00:55 -05:00
notes Add support for ELF code injection 2023-04-27 11:08:54 -05:00
src Update binary patching implementation 2023-04-27 13:55:25 -05:00
testing Update binary patching implementation 2023-04-27 13:55:25 -05:00
.gitignore Add support for binary patching 2023-04-10 14:13:29 -05:00
Cargo.toml Add support for binary patching 2023-04-10 14:13:29 -05:00
LICENSE Initial commit 2023-01-23 20:31:41 -06:00
README.md Update README.md 2023-04-27 14:00:55 -05:00

README.md

chisel

chisel is a tool for decompiling *nix ELF programs for binary analysis and reverse engineering. This project is being developed for assignments pertaining to Auburn University's COMP5970 Binary Program Analysis course.

Binary Analysis Technique

chisel uses a linear dissassembly approach for converting the ELF text section into x86 assembly instructions. Future implementations will have more advances analysis techniques such as recursive descent, as well as potential binary patching.

Supported formats

chisel supports binaries compiled to the ELF format from most x86/x64 *nix systems, and does not currently support macOS Mach-O or Windows PE binaries.

Due to an indexing bug, current iterations of chisel do not support 32-bit x86 applications. Only x86-64 is supported.

Building and Installing

To build and install chisel, use the following steps:

$ git clone git@github.com:Gman0064/chisel.git

$ cd chisel && cargo install

Usage

The following format can be used to pass a binary to chisel to analyze. The repository also includes a few binaries in ./testing/ as included examples. chisel also supports binary rewriting/patching by specifying the -p flag along with a .bin file of assembly code you would like to inject.

$ chisel [EXECUTABLE] [-p] [PATCH_FILE]

Binary patching is currently very buggy and may cause segmentation faults with the patched binary