Skip to content

Frida Taint Tracing #5

@bannsec

Description

@bannsec

Implement some level of taint tracing with Frida engine. Some work has been done on this already:

https://github.com/andreafioraldi/taint-with-frida

A good test for this would be to check if our input fully (or partially) taints a memory read or write. A good example of this was the SunshineCTF 2020 pwn challenge "oomg-space2", where your password size input ends up tainting a single 0-byte write.

https://github.com/HackUCF/SunshineCTF-2020-Public/tree/master/Pwn/OOMG_SPACE2
oomg_space2.zip

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions