ret-sync | debugging session | Reverse Engineering library

 by   bootleg C Version: ext_bn_community_release_v0.1.0 License: GPL-3.0

kandi X-RAY | ret-sync Summary

kandi X-RAY | ret-sync Summary

ret-sync is a C library typically used in Utilities, Reverse Engineering applications. ret-sync has no bugs, it has no vulnerabilities, it has a Strong Copyleft License and it has medium support. You can download it from GitHub.

ret-sync is a set of plugins that helps to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg2/x64dbg) with IDA/Ghidra/Binary Ninja disassemblers.
Support
    Quality
      Security
        License
          Reuse

            kandi-support Support

              ret-sync has a medium active ecosystem.
              It has 1636 star(s) with 230 fork(s). There are 49 watchers for this library.
              OutlinedDot
              It had no major release in the last 12 months.
              There are 11 open issues and 67 have been closed. On average issues are closed in 67 days. There are 3 open pull requests and 0 closed requests.
              It has a neutral sentiment in the developer community.
              The latest version of ret-sync is ext_bn_community_release_v0.1.0

            kandi-Quality Quality

              ret-sync has 0 bugs and 0 code smells.

            kandi-Security Security

              ret-sync has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.
              ret-sync code analysis shows 0 unresolved vulnerabilities.
              There are 0 security hotspots that need review.

            kandi-License License

              ret-sync is licensed under the GPL-3.0 License. This license is Strong Copyleft.
              Strong Copyleft licenses enforce sharing, and you can use them when creating open source projects.

            kandi-Reuse Reuse

              ret-sync releases are available to install and integrate.
              Installation instructions, examples and code snippets are available.
              It has 5358 lines of code, 494 functions and 25 files.
              It has high code complexity. Code complexity directly impacts maintainability of the code.

            Top functions reviewed by kandi - BETA

            kandi's functional review helps you automatically verify the functionalities of the libraries and avoid rework.
            Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of ret-sync
            Get all kandi verified functions for this library.

            ret-sync Key Features

            No Key Features are available at this moment for ret-sync.

            ret-sync Examples and Code Snippets

            No Code Snippets are available at this moment for ret-sync.

            Community Discussions

            QUESTION

            secret-inject@azurekeyvault waiting forever
            Asked 2021-Oct-29 at 08:03

            I would like to use akv2k8s.io for adding key vault into kubernetes using helm chart.

            ...

            ANSWER

            Answered 2021-Oct-28 at 18:25

            Funny, i also played this week with akv2k8s :)

            Did you create a role assignment for the kubelet identity to your keyvault?

            Source https://stackoverflow.com/questions/69757057

            QUESTION

            How to break in x64dbg from ghidra's corresponding instructions?
            Asked 2021-Jan-26 at 14:22

            I have x64dbg and ghidra synchronized via ret-sync. I found an interesting point in ghidra:

            ...

            ANSWER

            Answered 2021-Jan-19 at 09:06

            You said you wanted to go to 328b4 but your second snippet is at ...32B4 and looks like you ended up in the middle of an instruction. I would expect the correct address to be 0x00007FF8B2F81000 + 0x328b4 = 0x7ff8b2fb38b4.

            I am not aware of ret-sync supporting setting breakpoints, but you can do the address translation more easily by either getting the relative offset by hovering

            Source: https://twitter.com/dev747368/status/1347360276476293125

            and then adding the x64dbg offset of 00007FF8B2F81000 to offset (2008h in the screenshot, in your case 328b4h )

            Or you can script this by running currentAddress.subtract(currentProgram.imageBase) in the shell to get the relative offset for the current address (again 328b4h in your example) and then adding the x64dbg offset. So the complete command would be: currentAddress.subtract(currentProgram.imageBase).add(0x00007FF8B2F81000) Run this in the Python REPL and the correct x64dbg address for the current address should result.

            Source https://stackoverflow.com/questions/65768385

            Community Discussions, Code Snippets contain sources that include Stack Exchange Network

            Vulnerabilities

            No vulnerabilities reported

            Install ret-sync

            For IDA installation, copy Syncplugin.py and retsync folder from ext_ida to IDA plugins directory, for example:.
            C:\Program Files\IDA Pro 7.4\plugins
            %APPDATA%\Hex-Rays\IDA Pro\plugins
            ~/.idapro/plugins
            Either use the pre-built version from the ext_ghidra/dist folder or follow the instruction to build it. Each extension build only supports the version of Ghidra specified in the plugin's file name. E.g. ghidra_9.1_PUBLIC_20191104_retsync.zip is for Ghidra 9.1 Public.
            Install Ghidra
            Install gradle
            Build extension for your Ghidra installation (replace $GHIDRA_DIR with your installation directory)
            A status window is also available from Windows -> RetSyncPlugin. You generally want to drop it on the side to integrate it with the Ghidra environment windows.
            From Ghidra projects manager: File -> Install Extensions..., click on the + sign and select the ext_ghidra/dist/ghidra_*_retsync.zip and click OK. This will effectively extract the retsync folder from the zip into $GHIDRA_DIR/Extensions/Ghidra/
            Restart Ghidra as requested
            After reloading Ghidra, open a module in CodeBrowser. It should tell you a new extension plugin has been detected. Select "yes" to configure it. Then tick "RetSyncPlugin" and click OK. The console should show something like:
            From Ghidra CodeBrowser tool: use toolbar icons or shortcuts to enable (Alt+s)/disable (Alt+Shift+s)/restart (Alt+r) synchronization.
            ret-sync is not yet distributed through the Binary Ninja's Plugin Manager; a manual installation is required. Simply copy that content of the ext_bn folder into Binary Ninja's plugins folder, for example:.
            Either use pre-built binaries or use the Visual Studio 2017 solution provided in ext_windbg, (see https://docs.microsoft.com/en-us/visualstudio/releasenotes/vs2017-relnotes if needed). This will build the x64\release\sync.dll file.
            You will need to copy the resulting sync.dll file into the appropriate Windbg extension path. For earlier versions of Windbg this is is something like this (be careful of x86/x64 flavours), for example. The folder for storing extension seems to be based on the PATH, so you need to put it one of the queried locations.
            WinDbg Classic:
            Windbg Preview
            Note: If you get the following error, it is because you haven't copied the file to the right folder in the above steps. The error below usually means that Windbg tried to load the incorrect flavour of the extension, ex: x86 in place of the x64 sync.dll.
            LLDB support is experimental, however:.
            Load extension (can also be added in ~/.lldbinit)
            OllyDbg 1.10 support is experimental, however:.
            Build the plugin using the VS solution (optional, see pre-built binaries)
            Copy the dll within OllyDbg's plugin directory
            OllyDbg2 support is experimental, however:.
            Build the plugin using the VS solution (optional, see pre-built binaries)
            Copy the dll within OllyDbg2's plugin directory
            Based on testplugin, https://github.com/x64dbg/testplugin. x64dbg support is experimental, however:.
            Build the plugin using the VS solution (optional, see pre-built binaries). May you need a different version of the plugin sdk, a copy can be found in each release of x64dbg. Paste the "pluginsdk" directory into "ext_x64dbg\x64dbg_sync"
            Copy the dll (extension is .d32 or .dp64) within x64dbg's plugin directory.

            Support

            To troubleshoot issues with the IDA extension two options are available in the file retsync/rsconfig.py:. Setting LOG_LEVEL value to logging.DEBUG makes the plugin more verbose. Setting LOG_TO_FILE_ENABLE value to True triggers the logging of exception information from broker.py and dispatcher.py into dedicated files. Log file are generated in the %TMP% folder with a name pattern retsync.%s.err .
            Find more information at:

            Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from over 650 million Knowledge Items

            Find more libraries
            CLONE
          • HTTPS

            https://github.com/bootleg/ret-sync.git

          • CLI

            gh repo clone bootleg/ret-sync

          • sshUrl

            git@github.com:bootleg/ret-sync.git

          • Stay Updated

            Subscribe to our newsletter for trending solutions and developer bootcamps

            Agree to Sign up and Terms & Conditions

            Share this Page

            share link

            Explore Related Topics

            Consider Popular Reverse Engineering Libraries

            ghidra

            by NationalSecurityAgency

            radare2

            by radareorg

            ILSpy

            by icsharpcode

            bytecode-viewer

            by Konloch

            ImHex

            by WerWolv