mirror of
https://github.com/NationalSecurityAgency/ghidra.git
synced 2026-09-19 16:40:38 -09:00
bd72532653
GP-6966: post-review GP-6966: in review GP-6966: not all tests pass, but... GP-6966: better messaging GP-6966: mods for x64dbg GP-6966: docs (GP-6972) GP-6966: fixes for linux->windows GP-6966: fix for exit; fix for WINDBG_DIR
120 lines
4.8 KiB
PowerShell
120 lines
4.8 KiB
PowerShell
## ###
|
|
# IP: GHIDRA
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
##
|
|
#@title x64dbg via ssh
|
|
#@image-opt env:OPT_TARGET_IMG
|
|
#@desc <html><body width="300px">
|
|
#@desc <h3>Launch with <tt>x64dbg</tt> via <tt>ssh</tt></h3>
|
|
#@desc <p>
|
|
#@desc This will start <tt>x64dbg</tt> on the remote system via a Python interpreter.
|
|
#@desc For setup instructions, press <b>F1</b>.
|
|
#@desc </p>
|
|
#@desc </body></html>
|
|
#@menu-group x64dbg
|
|
#@icon icon.debugger
|
|
#@help x64dbg#ssh
|
|
#@depends Debugger-rmi-trace
|
|
#@env OPT_TARGET_IMG:str="" "Image" "The target binary executable image"
|
|
#@env OPT_TARGET_ARGS:str="" "Arguments" "Command-line arguments to pass to the target"
|
|
#@env OPT_TARGET_DIR:str="" "Dir" "Initial directory"
|
|
#@env OPT_SSH_PATH:file="ssh" "ssh command" "The path to ssh on the local system. Omit the full path to resolve using the system PATH."
|
|
#@env OPT_HOST:str="localhost" "[User@]Host" "The hostname or user@host"
|
|
#@env OPT_REMOTE_PORT:int=12345 "Remote Trace RMI Port" "A free port on the remote end to receive and forward the Trace RMI connection."
|
|
#@env OPT_EXTRA_SSH_ARGS:str="" "Extra ssh arguments" "Extra arguments to pass to ssh. Use with care."
|
|
#@env OPT_X64DBG_EXE:file="C:\\Software\\release\\x64\\x64dbg.exe" "Path to x64dbg.exe" "Path to x64dbg.exe (or equivalent)."
|
|
#@env OPT_PYTHON_EXE:file!="python" "Python command" "The path to the Python 3 interpreter. Omit the full path to resolve using the system PATH."
|
|
#@env OPT_PYTHON_ARGS:str="" "python cmd args" "Arguments passed to python (versus the target)"
|
|
|
|
. ..\support\x64dbgsetuputils.ps1
|
|
|
|
function Compute-Python-Args {
|
|
param($TempFile)
|
|
|
|
$arglist = @("$Env:OPT_PYTHON_EXE")
|
|
$arglist+=@("-i")
|
|
if ("$Env:OPT_PYTHON_ARGS" -ne "") {
|
|
$arglist+=($Env:OPT_PYTHON_ARGS)
|
|
}
|
|
$arglist+=($TempFile)
|
|
if ("$Env:OPT_REMOTE_PORT" -ne "") {
|
|
$arglist+=("localhost:$Env:OPT_REMOTE_PORT")
|
|
}
|
|
else {
|
|
$arglist+=($Env:GHIDRA_TRACE_RMI_ADDR)
|
|
}
|
|
|
|
if ("$Env:OPT_TARGET_IMG" -ne "") {
|
|
$arglist+=($Env:OPT_TARGET_IMG)
|
|
}
|
|
if ("$Env:OPT_X64DBG_EXE" -ne "") {
|
|
$arglist+=($Env:OPT_X64DBG_EXE)
|
|
}
|
|
if ("$Env:OPT_TARGET_DIR" -ne "") {
|
|
$arglist+=($Env:OPT_TARGET_DIR)
|
|
}
|
|
if ("$Env:OPT_TARGET_ARGS" -ne "") {
|
|
$arglist+=($Env:OPT_TARGET_ARGS)
|
|
}
|
|
return $arglist
|
|
}
|
|
|
|
$Env:OPT_OS_WINDOWS = $true
|
|
$tmpfile = "local-x64dbg.py"
|
|
$arglist = Compute-Python-Args -TempFile $tmpfile
|
|
|
|
$scpargs = Compute-Scp-Args "..\support\$tmpfile"
|
|
$sshargs = Compute-Ssh-Args $arglist True
|
|
|
|
$scpproc = Start-Process -FilePath $scpargs[0] -ArgumentList $scpargs[1..$scpargs.Count] -NoNewWindow -Wait -PassThru
|
|
$sshproc = Start-Process -FilePath $sshargs[0] -ArgumentList $sshargs[1..$sshargs.Count] -NoNewWindow -Wait -PassThru
|
|
|
|
$version = Get-Ghidra-Version
|
|
$answer = Check-Result-And-Prompt-Mitigation $sshproc @"
|
|
It appears ghidraxdbg is missing from the remote system. This can happen if you
|
|
forgot to install the required package. This can also happen if you installed
|
|
the packages to a different Python environment than is being used by the
|
|
remote's x64dbg.
|
|
|
|
This script is about to offer automatic resolution. If you'd like to resolve
|
|
this manually, answer no to the next question and then see Ghidra's help by
|
|
pressing F1 in the dialog of launch parameters.
|
|
|
|
WARNING: Answering yes to the next question will invoke pip to try to install
|
|
missing or incorrectly-versioned dependencies. It may attempt to find packages
|
|
from the PyPI mirror configured on the REMOTE system. If you have not configured
|
|
one, it will connect to the official one.
|
|
|
|
WARNING: We invoke pip with the --break-system-packages flag, because some
|
|
debuggers that embed Python (gdb, lldb) may not support virtual environments,
|
|
and so the packages must be installed to your user environment.
|
|
|
|
NOTE: This will copy Python wheels into the HOME directory of the user on the
|
|
remote system. You may be prompted to authenticate a few times while packages
|
|
are copied and installed.
|
|
|
|
NOTE: Automatic resolution will cause this session to terminate. When it has
|
|
finished, try launching again.
|
|
"@ "Would you like to install 'ghidraxdbg>=$version'?"
|
|
|
|
if ($answer) {
|
|
Write-Host "Copying Wheels to $Env:OPT_HOST"
|
|
Mitigate-Scp-PyModules "Debugger-rmi-trace" "<SELF>"
|
|
|
|
Write-Host "Installing Wheels into python"
|
|
$arglist = Compute-X64dbg-PipInstall-Args "'-f'" "os.environ['HOME']" "'ghidraxdbg>=$version'"
|
|
$sshargs = Compute-Ssh-Args $arglist False
|
|
Start-Process -FilePath $sshargs[0] -ArgumentList $sshargs[1..$sshargs.Count] -NoNewWindow -Wait
|
|
}
|