elfvulnscan - A simple binary vulnerability scanner module for L

项目说明

automated-binary-

A modular static scanner for Linux ELF binaries. It analyzes binary instructions using objdump and identifies unsafe function calls, heap o, and potential command injections — all without executing the binary.

Features

Stack-based Detection (UnsafeDetector)

Disassembles .text section and analyzes instructions.

Flags unsafe standard library calls:

- gets, strcpy, sprintf, scanf, etc.

Reports:

- Instruction address (full address)
- Called function
- Risk level (HIGH / MEDIUM)
- Optional function name (if a )

Heap-based O Detection (HeapO)

Tracks dynamic memory allocations (malloc, calloc)

Checks copying instructions (memcpy, strcpy, etc.) that may exceed allocated size

Detects rep movsb / rep stosb used on heap buffers

Reports:

- Instruction address
- Number of bytes copied size
- Allocation site address (if a)

Command Injection Detection (CommandInjectionDetector)

Identifies uses of:

- system, popen, and all exec*

Reports:

- Instruction address
- Target function (e.g., system)
- Risk detail

Prerequisites

Linux (tested on Ubuntu/Debian)

g++ with C++17 support

binutils (provides objdump and c++filt)

cmake (optional but recommended)

Build Instructions

Option 1: Using CMake

Option 2: Manual Compile

Usage

Sample Output

Extending

To add your own detector:

1. Create a new pair of files: include/MyDetector.h and src/MyDetector.cpp
2. Implement:

3. Add your files to CMakeLists.txt or the g++ compile command
4. Include and invoke your detector from src/main.cpp and print results similar to existing modules

Contributing

Pull requests are welcome. You can contribute by:

Adding new detectors (e.g., format string, integer o)

Improving disassembly and instruction parsing

Enhancing reporting formats (e.g., JSON output, IDE integration)

Performance impro

项目信息

开发语言：C++

Star 数：18

技术要点

该项目属于安全软件方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕A simple binary vulnerability scanner module for Linux that statically analyzes ELF binary files to identify potential vulnerabilities.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。