New answers tagged radare2
1
@@ is indeed for flags [not only those that are prefixed with sym. though].
It looks like you need to use the @@= iterator.
For example:
px 4 @@=`afl~[0]`
0
This is not a bug in radare2.
The comment that you see in red is merely the imported function prototype. In both cases seen in the picture, the parameter to puts is pushed through eax whereas it is loaded from a memory location based on ebx. radare2 does not emulate the code [unless told], so it cannot display the actual string being pointed.
1
Here is a small angr script that can do so:
proj = angr.Project('...path...')
state = proj.factory.blank_state(addr=0x0804EA9E)
simulation = proj.factory.simgr(state)
ret = simulation.explore(find=0x0804EAA3)
print(ret.found[0].regs.ecx)
Between the addresses 0x0804EA9E to 0x0804EAA3 I've got mov ecx, 0Ah so I get: <BV32 0xa> from the print.
I know ...
0
To type two inputs of
aaa
as expected in your first example, write
#!/usr/bin/rarun2
stdin="aaa\naaa\n"
in a file script.rr2. Then do radare2 -r script.rr2 -d [your program to debug].
Top 50 recent answers are included
