e-m-b-a/emba
1
0
Fork 0
mirror of https://github.com/e-m-b-a/emba.git synced 2026-10-12 02:13:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

cleanup

Browse Source
This commit is contained in:
Michael Messner
2026-04-30 10:36:03 +02:00
parent 3fd9660180
commit 9581fbada5
5 changed files with 51 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
helpers/helpers_emba_html_generator.sh
+1 -1
View File
@@ -85,7 +85,7 @@ add_link_tags() {
# [REF] anchor
if (grep -a -q -E '\[REF\]' "${lLINK_FILE}"); then
readarray -t lREF_LINKS_L_NUMBER_ARR < <(grep -a -n -E '\[REF\].*' "${lLINK_FILE}" | cut -d':' -f1)
readarray -t lREF_LINKS_L_NUMBER_ARR < <(grep -a -n -E '\[REF\].*' "${lLINK_FILE}" | cut -d':' -f1 || true)
# print_output "[*] REF link found in ${lLINK_FILE}" "no_log"
for lREF_LINK_NUMBER in "${lREF_LINKS_L_NUMBER_ARR[@]}"; do
DEPTH="."
installer.sh
+3
View File
@@ -486,6 +486,9 @@ if [[ "${CVE_SEARCH}" -ne 1 ]] || [[ "${DOCKER_SETUP}" -ne 1 ]] || [[ "${IN_DOCK
IL15_emulated_checks_init
# Upcoming feature
# IL16_legacy_ssl_curl
IF17_cve_bin_tool
IF50_aggregator_common
modules/F50_base_aggregator.sh
+2 -2
View File
@@ -544,10 +544,10 @@ output_binaries() {
readarray -t lRESULTS_STRCPY_ARR < <(find "${LOG_DIR}"/s1[34]*/ -xdev -iname "vul_func_*_strcpy-*.txt" 2>/dev/null |
sed "s/.*vul_func_//" | sort -g -r | sed "s/_strcpy-/ strcpy /" | sed "s/\.txt//" | rev | cut -d '-' -f2- | rev |
uniq | head -10 2>/dev/null || true)
sort -u -t ' ' -k3 | sort -g -r | head -10 2>/dev/null || true)
readarray -t lRESULTS_SYSTEM_ARR < <(find "${LOG_DIR}"/s1[34]*/ -xdev -iname "vul_func_*_system-*.txt" 2>/dev/null |
sed "s/.*vul_func_//" | sort -g -r | sed "s/_system-/ system /" | sed "s/\.txt//" | rev | cut -d '-' -f2- | rev |
uniq | head -10 2>/dev/null || true)
sort -u -t ' ' -k3 | sort -g -r | head -10 2>/dev/null || true)
# strcpy:
if [[ "${#lRESULTS_STRCPY_ARR[@]}" -gt 0 ]] && [[ $(echo "${lRESULTS_STRCPY_ARR[0]}" | awk '{print $1}') -gt 0 ]]; then
modules/L25_web_checks.sh
+8 -1
View File
@@ -70,8 +70,15 @@ main_web_check() {
# handle first https and afterwards http
if [[ "${lSERVICE}" == *"ssl|http"* ]] || [[ "${lSERVICE}" == *"ssl/http"* ]]; then
# enable old cyphers
# enable old cyphers and test access:
sed -i -E 's/MinProtocol[=\ ]+.*/MinProtocol = None/g' /etc/ssl/openssl.cnf
local lCURL_OPTS_ARR=("-sS" "--noproxy" '*' '-k')
timeout --preserve-status --signal SIGINT 4 curl "${lCURL_OPTS_ARR[@]}" "https://${lIP_ADDRESS_}:${lPORT}" |& tee "${LOG_PATH_MODULE}/ssl_check_${lIP_ADDRESS_}-${lPORT}.log" || true
if grep -q "unsupported protocol" "${LOG_PATH_MODULE}/ssl_check_${lIP_ADDRESS_}-${lPORT}.log"; then
print_output "[-] TLS/SSL service detected on ${lIP_ADDRESS_}:${lPORT} which is running on some unsupported protocol"
print_output "[*] Switching to legacy OpenSSL and legacy curl version"
alias curl="LD_LIBRARY_PATH=${EXT_DIR}/legacy/lib ${EXT_DIR}/legacy/bin/curl --sslv2 --sslv3 -k"
fi
lSSL=1
if system_online_check "${lIP_ADDRESS_}" "${lPORT}"; then
# we make a screenshot for every web server
modules/S16_ghidra_decompile_checks.sh
+37 -7
View File
@@ -18,6 +18,9 @@
# The generated source code is further analysed with semgrep and the rules provided by 0xdea
# (https://github.com/0xdea/semgrep-rules)
# Upcoming feature
INTERNAL_LINKING=0
S16_ghidra_decompile_checks() {
module_log_init "${FUNCNAME[0]}"
module_title "Check decompiled binary source code for vulnerabilities"
@@ -303,27 +306,32 @@ s16_semgrep_logger() {
# we only handle decompiled code files with semgrep issues, otherwise we move to the next function
# print_output "[*] Testing ${lHARUSPEX_FILE_NAME} against semgrep log ${lSEMGREPLOG}"
if ! grep -q "${lHARUSPEX_FILE_NAME}" "${lSEMGREPLOG_CSV}"; then
return
# for internal linking we need all the files in the future - currently we do not need further processing
if [[ "${INTERNAL_LINKING:-0}" -eq 0 ]]; then
if ! grep -q "${lHARUSPEX_FILE_NAME}" "${lSEMGREPLOG_CSV}"; then
return
fi
fi
if [[ -f "${lHARUSPEX_FILE}" ]]; then
mv "${lHARUSPEX_FILE}" "${LOG_PATH_MODULE}"/haruspex_"${lNAME}" || print_error "[-] Error storing Ghidra decompiled code for ${lNAME} in log directory"
fi
# print_output "[*] moved ${lHARUSPEX_FILE} to ${LOG_PATH_MODULE}/haruspex_${lNAME}" "no_log"
if [[ -f "${lSEMGREPLOG}" ]]; then
local lC_SRC_FCT="${LOG_PATH_MODULE}/haruspex_${lNAME}/${lHARUSPEX_FILE_NAME}"
# now we rebuild our logfile
while IFS="," read -r lPATH lCHECK_ID lLINE_NR lMESSAGE; do
if [[ "${lPATH}" != *"${lHARUSPEX_FILE_NAME}"* ]]; then
continue
fi
write_log "[+] Identified source function: ${ORANGE}${LOG_PATH_MODULE}/haruspex_${lNAME}/${lHARUSPEX_FILE_NAME}${NC}" "${lSEMGREPLOG_TMP}"
write_link "${LOG_PATH_MODULE}/haruspex_${lNAME}/${lHARUSPEX_FILE_NAME}" "${lSEMGREPLOG_TMP}"
write_log "[+] Identified source function: ${ORANGE}${lC_SRC_FCT}${NC}" "${lSEMGREPLOG_TMP}"
write_link "${lC_SRC_FCT}" "${lSEMGREPLOG_TMP}"
write_log "$(indent "$(indent "Semgrep rule: ${ORANGE}${lCHECK_ID}${NC}")")" "${lSEMGREPLOG_TMP}"
write_log "$(indent "$(indent "Issue description:\\n${lMESSAGE}")")" "${lSEMGREPLOG_TMP}"
write_log "" "${lSEMGREPLOG_TMP}"
if [[ -f "${LOG_PATH_MODULE}/haruspex_${lNAME}/${lHARUSPEX_FILE_NAME}" ]]; then
if [[ -f "${lC_SRC_FCT}" ]]; then
# extract the identified code line from the source code to show it in the overview page
lCODE_LINE="$(strip_color_codes "$(sed -n "${lLINE_NR}"p "${LOG_PATH_MODULE}/haruspex_${lNAME}/${lHARUSPEX_FILE_NAME}" 2>/dev/null)")"
lCODE_LINE="$(strip_color_codes "$(sed -n "${lLINE_NR}"p "${lC_SRC_FCT}" 2>/dev/null)")"
shopt -s extglob
lCODE_LINE="${lCODE_LINE##+([[:space:]])}"
lCODE_LINE="$(echo -e "${lCODE_LINE}" | tr -d '\0')"
@@ -332,15 +340,37 @@ s16_semgrep_logger() {
# shellcheck disable=SC2116
lLINE_NR="$(echo "${lLINE_NR}")"
# color the identified line in the source file:
sed -i -r "${lLINE_NR}s/.*/\x1b[32m&\x1b[0m/" "${LOG_PATH_MODULE}/haruspex_${lNAME}/${lHARUSPEX_FILE_NAME}" || true
sed -i -r "${lLINE_NR}s/.*/\x1b[32m&\x1b[0m/" "${lC_SRC_FCT}" || true
# this is the output
write_log "$(indent "$(indent "${GREEN}${lLINE_NR}${NC} - ${ORANGE}${lCODE_LINE}${NC}")")" "${lSEMGREPLOG_TMP}"
# lBINARY;source function;semgrep rule;code line nr; code line
write_csv_log "${lNAME}" "${lHARUSPEX_FILE_NAME}" "${lCHECK_ID}" "${lLINE_NR}" "${lCODE_LINE/\;/}" "${lMESSAGE/\;/}"
fi
write_log "\\n-----------------------------------------------------------------\\n" "${lSEMGREPLOG_TMP}"
done <"${lSEMGREPLOG_CSV}"
# Finally we check for function calls and include links to the file of the function
# TODO: The linking on multiple sublevels is currently not working!
# We need to fix the webreporter for this
if [[ "${INTERNAL_LINKING:-0}" -eq 1 ]]; then
local lFCT_CALLS_ARR=()
mapfile -t lFCT_CALLS_ARR < <(grep -o "FUN_\(.*\);" "${lC_SRC_FCT}" | cut -d ',' -f1 | cut -d '(' -f1 | sort -u || true)
for lFCT_CALL in "${lFCT_CALLS_ARR[@]}"; do
[[ -z "${lFCT_CALL}" ]] && continue
print_output "[*] Checking ${lFCT_CALL} in ${lC_SRC_FCT}" "no_log"
lFCT_CALL_TARGET=$(find "${LOG_PATH_MODULE}/haruspex_${lNAME}/" -name "*${lFCT_CALL}*" -print -quit)
if [[ -n "${lFCT_CALL_TARGET}" ]]; then
# check if we have already linked the function
# if no link is avaialable, we include it now
if ! grep -q "[REF] ${lFCT_CALL_TARGET}" "${lC_SRC_FCT}"; then
print_output "[*] Adding linking to function ${lFCT_CALL} into ${lC_SRC_FCT}" "no_log"
sed -i "#${lFCT_CALL}#a \[REF\] ${lFCT_CALL_TARGET}" "${lC_SRC_FCT}" || true
fi
fi
done
fi
fi
# GPT integration