Willi Ballenthin
4be3fe1628
Merge branch 'master' into wb-proto
2023-03-24 11:51:45 +01:00
Willi Ballenthin
ddc52fa21c
Merge branch 'master' of personal.github.com:mandiant/capa
2023-03-23 16:04:54 +01:00
Willi Ballenthin
7d12942cf7
Merge branch 'binja_backend' of github.com:Vector35/capa into Vector35-binja_backend
2023-03-23 11:31:25 +01:00
Willi Ballenthin
c52b0a22e0
tests: simplify loading of result document from file
2023-03-23 11:04:53 +01:00
Willi Ballenthin
e8ddee4782
Merge branch 'master' of personal.github.com:mandiant/capa into wb-proto
2023-03-23 10:35:30 +01:00
Willi Ballenthin
02fdf41969
tests: add tests demonstrating result document round tripping
2023-03-22 10:47:45 +01:00
Willi Ballenthin
eb20724d78
Merge branch 'master' into wb-proto
2023-03-22 09:46:03 +01:00
Willi Ballenthin
f1c495dc0a
*: use FORMAT_AUTO instead of string literal
2023-03-21 16:54:48 +01:00
Willi Ballenthin
1f3582c9c3
mypy
2023-03-21 16:45:24 +01:00
mr-tz
c3ed12d8d4
add helper function
2023-03-20 17:46:36 +01:00
manasghandat
1336796c0c
code style : update remaining files ( #1353 )
...
* code style: update string formatting using fstrings
---------
Co-authored-by: Willi Ballenthin <willi.ballenthin@gmail.com >
Co-authored-by: Moritz <mr-tz@users.noreply.github.com >
2023-03-16 11:16:18 +01:00
Harsh Mehta
74009eb4a4
Updated Copyright ( #1383 )
...
* Updated Copyright
2023-03-14 17:58:43 +01:00
mr-tz
a7b7f643a5
update translator and tests
2023-03-14 10:13:49 +01:00
Xusheng
c648af2cb4
Select a different test file for the nzxor feature
2023-03-05 12:52:49 +08:00
Xusheng
4a698ffdff
Add a Binary Ninja backend for capa
2023-03-05 12:52:49 +08:00
Moritz
52de09a032
Fix byte/string extraction and unit tests ( #1339 )
...
* Fix wrong expected results on string and bytes tests. Fix https://github.com/mandiant/capa/issues/1336
* Fix IDA insn/byte extractor checks wrong address. Fix https://github.com/mandiant/capa/issues/1327
* fix vivisect string check and tests
---------
Co-authored-by: Xusheng <xusheng@vector35.com >
2023-03-02 10:33:14 +01:00
Willi Ballenthin
c197fd5086
proto: add type stubs for generate schema
2023-02-14 10:57:43 +01:00
Moritz
fa0ddba436
add format to global features and code refactors ( #1284 )
...
* refactor: get format handling
* add format to global features
2023-01-19 13:31:00 +01:00
Willi Ballenthin
5513d4ca43
viv: insn: string: handle viv bug around substrings ( #1273 )
...
* viv: insn: string: handle viv bug around substrings
closes #1271
* use minimum string length 4
* update overlapping string test and fixup vivisect elf analysis missing function
Co-authored-by: Moritz <mr-tz@users.noreply.github.com >
2023-01-19 13:02:53 +01:00
Moritz
5fa2a87747
fix dotnet and pe format handling ( #1256 )
2023-01-04 17:46:51 +01:00
mr-tz
eba1989c9f
Merge branch 'master' into fix-1062
2023-01-03 18:46:41 +01:00
Mike Hunhoff
b68be0c2ce
dotnet: emit namespace/class features for type references ( #1242 )
...
* dotnet: emit namespace/class features for type references
* dotnet: pre-compute .NET token caches
2022-12-21 15:59:29 -07:00
Mike Hunhoff
50490e6a93
dotnet: emit namespace/class features for ldvirtftn/ldftn instructions ( #1241 )
...
* dotnet: emit namespace/class features for ldvirtftn/ldftn instructions
* dotnet: add unit tests for ldftn/ldvirtftn namespace/class features
2022-12-20 13:29:29 -07:00
Mike Hunhoff
4ece47c64c
dotnet: emit calls to/from MethodDef methods ( #1236 )
...
* dotnet: emit calls to/from MethodDef methods
* dotnet: update function.py copyright header
2022-12-19 15:06:16 -07:00
Mike Hunhoff
e0491097b0
dotnet: emit API features for generic methods ( #1231 )
...
* dotnet: emit API features for generic methods
* dotnet: improve type checking
* dotnet: emit namespace/class features for generic methods
* dotnet: update for dnfile 0.13.0
* dotnet: refactor property extraction
2022-12-19 14:45:21 -07:00
Willi Ballenthin
22bef146f8
tests: add OS detection tests
2022-12-12 11:40:43 +01:00
Willi Ballenthin
ed24db4460
extractors: remove SMDA backend
...
closes #1210
closes #1062
2022-12-06 15:33:17 +00:00
Mike Hunhoff
20c7949be3
dotnet: emit features from newobj instruction ( #1186 )
2022-10-13 08:35:29 -06:00
Mike Hunhoff
3c1cd67f60
dotnet: support property feature extraction ( #1168 )
2022-09-09 12:09:41 -06:00
Moritz
2441c18a85
fix: use int instead of Token to decouple extractor and features ( #1158 )
2022-09-08 11:09:17 -06:00
William Ballenthin
faf414e3d8
tests: add more dotnet tests
2022-06-08 13:28:53 -06:00
Willi Ballenthin
c73db051c1
fixtures: add path to extractors
2022-06-06 15:13:11 -06:00
Willi Ballenthin
1a290a38c4
Merge branch 'master' into feature-981
2022-06-06 14:07:51 -06:00
Mike Hunhoff
3514d5c05c
dotnet: support file/function scope class and namespace features ( #1030 )
2022-05-26 11:19:31 -06:00
Moritz Raabe
b2853cc56b
feat: update dnfile tests and extractor
2022-05-12 18:37:02 +02:00
Moritz Raabe
716a73dfb4
feat: add handles and type annotations
2022-05-12 15:42:25 +02:00
Willi Ballenthin
78e9280a93
Merge branch 'master' into feature-981
2022-05-11 13:20:48 -06:00
Willi Ballenthin
07e35780d3
Merge branch 'master' into fix-988
2022-05-11 13:10:45 -06:00
Willi Ballenthin
a6427364e0
tests: add test demonstrating elf OS detection
2022-05-11 13:09:12 -06:00
Mike Hunhoff
0d849142ba
dotnet: emit mixed mode characteristic ( #1024 )
2022-05-06 14:32:06 -06:00
Mike Hunhoff
6fb9dd961a
dotnet: emit unmanaged call characteristic ( #1023 )
2022-05-06 13:05:48 -06:00
Mike Hunhoff
a9c9b3cea8
dotnet: extract file function names ( #1015 )
2022-05-06 08:34:50 -06:00
Mike Hunhoff
24c4215820
dotnet: add file string parsing ( #1012 )
2022-05-05 13:39:29 -06:00
Willi Ballenthin
808b7fb4dc
dnfile: fix types
2022-04-08 18:33:12 -06:00
Mike Hunhoff
580a2d7e45
dotnet: basic detection and feature extraction ( #987 )
2022-04-08 14:55:00 -06:00
Willi Ballenthin
1c7b6bcf7d
fixtures: use function that IDA doesn't recognize as lib func
2022-04-06 15:07:35 -06:00
Willi Ballenthin
b843cef986
tests: add tests for #320
2022-04-06 14:38:56 -06:00
Willi Ballenthin
0e95691cde
tests: fixtures: enable assertions against instruction scope
2022-04-06 14:38:33 -06:00
Willi Ballenthin
ecabd557a7
*: remove /x32 and /x64 flavors from number and offset features
2022-04-05 10:35:41 -06:00
Willi Ballenthin
9da4ff10da
*: rename OperandImmediate to OperandNumber
2022-03-31 10:37:06 -06:00
