I have an ARM IoT device with a web interface, and I have the binary of this device open in Ida Pro.

I looking for vulnerabilities in the webserver binary that can be exploited to run commands or bypass authentication.

There is the manual way, looking for unsafe functions in the binary that are susceptible to buffer overflows, or looking in the webserver to find input that is passed to exec or other input that can download files from the system.

I know this is the manual and slow way.

Is there any tool or maybe Ida Pro plugin that helps to find a vulnerabilities in binaries/in web applications?

  • Not free ($$$) refirmlabs.com/centrifuge-platform
    – 0xec
    Mar 27 '20 at 10:00
  • Open Source: FACT - The Firmware Analysis and Comparison Tool
    – 0xec
    Mar 27 '20 at 10:06
  • @0xec do you work with those tools? Do you recommend on them?? I saw those tool emulate first you device by firmware,do they know to find vulnerable without emulate the device? Mar 27 '20 at 11:05
  • Nope. Personally I didn't use those tools. I think they identify possible vulnerabilities by static analysis.
    – 0xec
    Mar 28 '20 at 7:31
  • You could always find or write scripts to assist with these tasks. Apr 4 '20 at 22:08

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.