/nucleus

Clone of Nucleus function detector.

Primary LanguageC++BSD 3-Clause "New" or "Revised" LicenseBSD-3-Clause

Clone of Nucleus function detector. Source: https://bitbucket.org/vusec/nucleus/src/master/

Based on the paper "Compiler-Agnostic Function Detection in Binaries", published at EuroS&P 2017.

Requirements:

  • libcapstone (tested with 3.0)
  • libbfd-multiarch

Platform:

  • Tested on Ubuntu 15.10 and 16.04 On these platforms you can install the required libraries by executing: make setup

Suggested usage:

make ./nucleus -e /bin/ls -d linear -i idainfo.py (idainfo.py can be run in IDA Pro to import the functions found by nucleus)