Questions tagged [qemu]
QEMU is a software that performs CPU emulation through dynamic binary translation. It allows the execution of applications compiled for a certain specific architecture to run on other architectures.
25
questions with no upvoted or accepted answers
5
votes
0
answers
1k
views
I'm trying to debug small mips code snippets in IDA with QEMU as debugger, but only NOP instructions show when I start the process
I followed the tutorial IDA Help: Debugging code snippets with QEMU.
It always worked with ARM code, but now I have to reverse some MIPS and only nops are displayed like this:
Should I adjust ...
- 51
5
votes
0
answers
2k
views
Emulate TP-Link WR841N using Qemu
I have downloaded a few different versions of the firmware from the TP-Link website. I've been piecing together details on how to achieve this but I'm missing some key points.
Following instructions ...
- 51
4
votes
0
answers
159
views
QEMU Translation block
I'm studying how QEMU translates native basic blocks and runs them. As far as I understand, it reads native basic blocks then retranslates them, but I wonder how it can deal with exceptions inside, so ...
- 1,410
4
votes
0
answers
356
views
Using GDB to trace guest OS inside a hypervisor, the whole running on Qemu - kvm
I use Gdb to trace the execution (breakpoint, single stepping, ...) of a hypervisor OS in Qemu and it works fine so far.
qemu-system-x86_64 -enable-kvm -display sdl -cpu host -serial my: stdio -m ...
- 141
3
votes
0
answers
2k
views
LD_PRELOAD in QEMU user space emulation
I was trying to emulate a firmware and as a part of the process I was interested in knowing what device files are being registered using mknod. In order to intercept those calls I had created a shared ...
3
votes
0
answers
1k
views
When to use qemu user mode versus system mode?
This seems to be a pretty basic question but I can't seem to find a good answer.
I am currently just following https://w00tsec.blogspot.ca/2013/09/analyzing-and-running-binaries-from.html to learn ...
- 101
3
votes
0
answers
371
views
Running vmlinux ELF under QEMU
I have a vmlinux ELF file to run under QEMU.
My arguments to qemu-system-arm.exe are:
The correct -cpu argument.
The versatilepb -machine which I'm not sure if it's the right choose, but can't see ...
- 403
2
votes
0
answers
125
views
Booting a Linux kernel ARM64 boot executable Image
I am self learning reverse engineering and working on reversing a firmware image for an unknown ioT device that's running on Zephyr. I have the firmware image (.img file), which returns 'Linux kernel ...
- 21
2
votes
0
answers
235
views
Finding (or building) a kernel for Huawei EchoLife EG8145V5
I have a Huawei EchoLife EG8145V5 for which I am trying to build some software. It has a built-in Linux distro of some sort, but I would like to add to it, as there is "plenty" of storage ...
- 121
2
votes
0
answers
873
views
How to perform full MIPS system emulation with QEMU, using the squashfs image and uBoot kernel image?
TL;DR:
Need tips on emulation of MIPS-BE system using QEMU with the help of squashfs image file and uBoot Kernel image file extracted from the firmware file.
Long Version:
- What I have:
A cheap ...
- 51
2
votes
0
answers
159
views
QEMU with GDB: Stepping Instruction causes Windows VM BSOD
I'm currently analyzing a piece of software inside a Windows 10 QEMU virtual machine which is connected to a remote GDB debugger. I have set breakpoints to audit what the application is doing.
I have ...
- 21
2
votes
0
answers
2k
views
IDA Pro GDB QEMU Tricore setup
I have added the lines below to IDA 6.95\cfg\gdb_arch.cfg to try to get QEMU Tricore debugging in IDA Pro, using an ARM tutorial as the basis (page 2):
https://www.hex-rays.com/products/ida/support/...
- 133
2
votes
0
answers
2k
views
Using QEMU to boot arm uImage kernel
I'm currently trying to reverse engineer the firmware for the Swann DVR16-4500 security camera system. I successfully extracted the cramfs filesystem and now I have the following files inside the ...
- 21
2
votes
0
answers
2k
views
USB not showing up on QNX in Qemu
I have spent some time reverse engineering a QNX 6.5.0 based system. I am pretty new to the Linux (Ubuntu) world and definitely new to QNX, Qemu, and embedded systems.
Since the hardware is fairly ...
- 21
1
vote
0
answers
49
views
How to debug armel and armhf binaries on x86-64 Ubuntu simultaneously?
I'm working on the challenges on ROP Emporium. For the ARMv5 version of the callme challenge, we are given two binaries and two shared libraries: callme_armv5 with libcallme_armv5.so and callme_armv5-...
- 151
1
vote
0
answers
74
views
Handle Ioctl call while running with qemu
I am using qemu to emulate a binary like this
qemu -strace XXXXX .
I saw that the first 2 system calls of this process were TCGETS to stdin and stdout. From man pages
Get and set terminal attributes
...
- 21
1
vote
0
answers
241
views
Strange behaviour debugging Android ARM binary with gdbserver
I'm trying to run this armv5 binary from OWASP's mobile security guide (validate) using Android Studio's emulator on my x86_64 machine. I'm seeing very weird behaviour and would appreciate any ...
- 133
1
vote
0
answers
216
views
Debugging arbitrary ARM binary image using IDA and QEMU
i'm new to this and still learning a lot. Now i have managed to download the binary image from an Flash memory out of a unit having an OMAP5912 SoC. The SoC has an ARM9 family CPU core running little ...
- 21
1
vote
0
answers
180
views
How can I emulate Huawei routers HG5xx firmware?
i want to pentest some HG routers in a way that i can try every thing without worrying if it would damage the router or not .... and a better view of debugging the actions .
- 180
1
vote
0
answers
1k
views
Debugging MIPS Binaries on Ubuntu 64-bit (version 14.04)
I have a MIPS 32-bit MSB binary and I can disassemble the code with IDA Pro and decompile it successfully with ReTargetable Decompiler.
In order to understand the binary much better, I need to debug ...
- 765
1
vote
0
answers
304
views
All data in IDA Pro turns into zeros when using QEMU
I'm trying to emulate a snippet of ARM assembly I have in IDA pro using QEMU. However I do not understand the output of the program.
When I start debugging the firmware, windows pop up for QEMU.
...
1
vote
0
answers
1k
views
Reverse Engineer firmware for Jffs2 filesystem in Qemu
I am looking at the firmware for my router C1000A/C1000A-D and I am having some difficulties in mounting and otherwise emulating this. From what I have read, the general process for reverse ...
- 773
1
vote
0
answers
688
views
Debug function in MIPS .ko file (with IDA and Qemu)
I have a .ko file which I grabbed from a router (MSB MIPS), and I'm trying to debug a specific function inside it with IDA.
Since i can't just "run" the ko file with QEmu, I tried to change its ...
- 123
1
vote
0
answers
419
views
qemu and gdb error: could not load xml document
I'm trying to debug an application using Qemu for AARCH64
./qemu-arm64-static -g 1234 file.bin
When running GDB and connecting to the remote host, I get the following error message:
$ ./aarch64-...
- 506
0
votes
0
answers
116
views
Emulator that emulates arm hardware
I want to hook arm instructions as they executes but most of the emulators are based on VirtualBox that uses houdini to translate arm instructions to x86, and i really can't hook a native JNI lib, ...
- 73