arno/bddisasm
1
0
Fork 0
mirror of https://github.com/bitdefender/bddisasm.git synced 2024-12-22 22:18:09 +00:00
Code Issues Releases Wiki Activity
102b43dd00
bddisasm/bdshemu_test/README.md
Andrei Vlad LUTAS f6050661d5 Multiple improvements in bdshemu 
Fixed an emulation bug for MOVZX and MOVSX instructions (https://github.com/bitdefender/bddisasm/issues/48)
New shellcode flag - call tot Wow32 reserved.
New shellcode flag - heaven's gate.
New shellcode flag - stack-pivot.
Moved bdshemu tests in a password protected zip file, so it doesn't trigger AV detections.
2021-08-10 11:43:51 +03:00

1020 B
Raw Blame History

Shellcode Emulator Tests

To avoid detections from anti-malware products the test files are stored in a password protected ZIP. The password is infected. The test script will automatically unzip the files before running the tests.

These tests are used to validate basic bdshemu functionality. Each test consists of up to three files:

  • The binary test file. The name format for this type of file is name_32|64[_r0]. No extension must be provided; 32 indicates 32 bit test file, 64 indicates 64 bit test file, and r0 indicates kernel payload
  • The output result file. Must be named the same as the binary test file, but with the extension .result
  • Optional assembly file, used to generate the binary test file

The test_all.py script will iterate all the test folders, and it will run bdshemu on each identified test file. The result file will be compared with the output of the test run. If they are not the same, the test will fail.

NOTE: This test will assume disasm is in the path. Works on Windows only.