/Banalyzer-CMDI

[Sunrin Security Project] Command Injection Static Analyzer with IDAPython

Primary LanguagePythonApache License 2.0Apache-2.0

Banalyzer CMDI

[Sunrin Security Project]

Develop Static Analyzer with IDAPython coded by KIM MIN JAE

python

Screenshot

GUI Screenshot

Environment

  • Tested on IDA Pro 7.7
  • Require >= Python 3.8

Features

  • Detects command injection, path traversal using trace scope after discovering vulnerable functions
  • Supports Advanced GUI

Install

On Windows

On Mac OS

brew install python

Usage

Open IDA script window (shift+f2) (mode: python), import and run!

To-do

Modify after accepting feedback