Toggle navigation
Toggle navigation
This project
Loading...
Sign in
노현종
/
2018-1-Capstone1-VulnNotti
Go to a project
Toggle navigation
Toggle navigation pinning
Projects
Groups
Snippets
Help
Project
Activity
Repository
Pipelines
Graphs
Issues
0
Merge Requests
0
Snippets
Network
Create a new issue
Builds
Commits
Issue Boards
Authored by
노현종
2018-05-16 18:44:01 +0900
Browse Files
Options
Browse Files
Download
Email Patches
Plain Diff
Commit
edf20af01fc53afd2c396caec4d6512c229ee31c
edf20af0
1 parent
960305ed
크리티컬 변수 선정
Hide whitespace changes
Inline
Side-by-side
Showing
3 changed files
with
55 additions
and
1 deletions
Vulnerablity_DB/VulnCrawler/Program.cs
Vulnerablity_DB/VulnCrawler/VulnAbstractCrawler.cs
Vulnerablity_DB/VulnCrawler/VulnWorker.cs
Vulnerablity_DB/VulnCrawler/Program.cs
View file @
edf20af
...
...
@@ -66,6 +66,16 @@ namespace VulnCrawler
}
public
static
void
Run
()
{
// Repository 폴더들이 있는 주소를 지정하면 하위 폴더 목록을 가져옴(Repository 목록)
// var fields = VulnWorker.GetCriticalVariant(@"return _is_safe_url(url, host) and _is_safe_url(url.replace('\\', '/'), host)");
var
fields
=
VulnWorker
.
GetCriticalVariant
(
@"if(i + inl < bl) {"
);
foreach
(
var
item
in
fields
)
{
Console
.
WriteLine
(
item
);
}
return
;
var
directorys
=
Directory
.
GetDirectories
(
@"c:\VulnPy"
);
if
(
directorys
.
Length
==
0
)
{
Console
.
WriteLine
(
"Repository 목록 찾기 실패"
);
...
...
Vulnerablity_DB/VulnCrawler/VulnAbstractCrawler.cs
View file @
edf20af
...
...
@@ -13,6 +13,8 @@ namespace VulnCrawler
// 추상 클래스
public
abstract
class
VulnAbstractCrawler
{
private
static
readonly
string
[]
ReservedList
=
{
"if"
,
"return"
,
"break"
,
"while"
,
"typedef"
};
/// <summary>
/// 생성자
/// 경로를 입력받아서(path)
...
...
@@ -132,6 +134,44 @@ namespace VulnCrawler
}
return
string
.
Empty
;
}
public
static
IEnumerable
<
string
>
GetCriticalVariant
(
string
line
)
{
// 메서드 정규식 패턴
string
methodPattern
=
@"(\w+)\("
;
// 변수 정규식 패턴
string
fieldPattern
=
@"\w+"
;
// 메서드 목록
var
methodSets
=
new
HashSet
<
string
>();
var
methods
=
Regex
.
Matches
(
line
,
methodPattern
);
// 현재 코드 라인에서 메서드 목록 추가
foreach
(
var
met
in
methods
)
{
var
method
=
met
as
Match
;
if
(
method
.
Success
)
{
Console
.
WriteLine
(
method
.
Groups
[
1
].
Value
);
methodSets
.
Add
(
method
.
Groups
[
1
].
Value
);
}
}
Console
.
WriteLine
(
"----"
);
var
vars
=
Regex
.
Matches
(
line
,
fieldPattern
);
// 변수 목록에서 메서드 목록에 있는 것 제외하고 반환
foreach
(
var
x
in
vars
)
{
var
field
=
x
as
Match
;
if
(
field
.
Success
)
{
if
(
methodSets
.
Contains
(
field
.
Value
))
{
continue
;
}
yield
return
field
.
Value
;
}
}
}
/// <summary>
/// MD5 함수
/// </summary>
...
...
Vulnerablity_DB/VulnCrawler/VulnWorker.cs
View file @
edf20af
...
...
@@ -35,7 +35,7 @@ namespace VulnCrawler
}
}
}
private
static
void
PrintPatchEntrys
(
IEnumerable
<
PatchEntryChanges
>
entrys
,
VulnAbstractCrawler
self
,
string
commitMsg
,
string
cve
)
{
...
...
@@ -109,6 +109,10 @@ namespace VulnCrawler
Console
.
WriteLine
(
$
"Original Func: {originalFunc}"
);
// 해쉬 후
Console
.
WriteLine
(
$
"Original Func MD5: {md5}"
);
Console
.
BackgroundColor
=
ConsoleColor
.
DarkRed
;
Console
.
WriteLine
(
$
"Patched: \n{entry.Patch}"
);
Console
.
ResetColor
();
Console
.
WriteLine
(
"=============================="
);
#
endregion
...
...
Please
register
or
login
to post a comment