CheckPointSW / Scout
Licence: mit
Scout - Instruction based research debugger (a poor man's debugger)
Stars: ✭ 127
Programming Languages
c
50402 projects - #5 most used programming language
Projects that are alternatives of or similar to Scout
Hydrafw
HydraFW official firmware for HydraBus/HydraNFC for researcher, hackers, students, embedded software developers or anyone interested in debugging/hacking/developing/penetration testing
Stars: ✭ 165 (+29.92%)
Mutual labels: firmware, research
Kafl
A fuzzer for full VM kernel/driver targets
Stars: ✭ 204 (+60.63%)
Mutual labels: firmware, research
Dap42
CMSIS-DAP debugger firmware for STM32F042Fx and STM32F103xx
Stars: ✭ 115 (-9.45%)
Mutual labels: firmware, debugger
Frodo
Android Library for Logging RxJava Observables and Subscribers.
Stars: ✭ 1,496 (+1077.95%)
Mutual labels: debugger
Mgos To Tasmota
A minimal firmware for OTA (over the air) flashing Tasmota, HAA, or ESPurna from Mongoose OS or compatible firmware types.
Stars: ✭ 118 (-7.09%)
Mutual labels: firmware
Rexbug
A thin Elixir wrapper for the redbug Erlang tracing debugger.
Stars: ✭ 126 (-0.79%)
Mutual labels: debugger
Private Tor Network
Run an isolated instance of a tor network in Docker containers
Stars: ✭ 125 (-1.57%)
Mutual labels: research
React Native Vdebug
React-Native 调试工具，支持Console终端、Network导出cURL，可视化Response，Retry cURL。
Stars: ✭ 124 (-2.36%)
Mutual labels: debugger
Code Switching Papers
A curated list of research papers and resources on code-switching
Stars: ✭ 122 (-3.94%)
Mutual labels: research
Iextractor
Automate extraction from iOS firmware files (.ipsw)
Stars: ✭ 124 (-2.36%)
Mutual labels: firmware
Puppet Debugger
A interactive live debugger and REPL for the puppet language
Stars: ✭ 117 (-7.87%)
Mutual labels: debugger
Apidebugger
A IDEA plug-in to help you easily complete the API debugging.
Stars: ✭ 125 (-1.57%)
Mutual labels: debugger
Fast 3d Pointcloud Segmentation
Fast 3D point cloud segmentation using supervoxels with geometry and color for 3D scene understanding
Stars: ✭ 122 (-3.94%)
Mutual labels: research
Reading
A list of computer-science readings I recommend
Stars: ✭ 1,919 (+1411.02%)
Mutual labels: research
Empiricalstandards
Empirical standards for conducting and evaluating research in software engineering
Stars: ✭ 122 (-3.94%)
Mutual labels: research
______ __
/ \ / |
/$$$$$$ | _______ ______ __ __ _$$ |_
$$ \__$$/ / | / \ / | / |/ $$ |
$$ \ /$$$$$$$/ /$$$$$$ |$$ | $$ |$$$$$$/
$$$$$$ |$$ | $$ | $$ |$$ | $$ | $$ | __
/ \__$$ |$$ \_____ $$ \__$$ |$$ \__$$ | $$ |/ |
$$ $$/ $$ |$$ $$/ $$ $$/ $$ $$/
$$$$$$/ $$$$$$$/ $$$$$$/ $$$$$$/ $$$$/
_______ __
/ \ / |
$$$$$$$ | ______ $$ |____ __ __ ______ ______ ______ ______
$$ | $$ | / \ $$ \ / | / | / \ / \ / \ / \
$$ | $$ |/$$$$$$ |$$$$$$$ |$$ | $$ |/$$$$$$ |/$$$$$$ |/$$$$$$ |/$$$$$$ |
$$ | $$ |$$ $$ |$$ | $$ |$$ | $$ |$$ | $$ |$$ | $$ |$$ $$ |$$ | $$/
$$ |__$$ |$$$$$$$$/ $$ |__$$ |$$ \__$$ |$$ \__$$ |$$ \__$$ |$$$$$$$$/ $$ |
$$ $$/ $$ |$$ $$/ $$ $$/ $$ $$ |$$ $$ |$$ |$$ |
$$$$$$$/ $$$$$$$/ $$$$$$$/ $$$$$$/ $$$$$$$ | $$$$$$$ | $$$$$$$/ $$/
/ \__$$ |/ \__$$ |
$$ $$/ $$ $$/
$$$$$$/ $$$$$$/
Purpose
"Scout" is an extendable basic debugger that was designed for use in those cases that there is no built-in debugger / gdb-stub in the debugee process / firmware. The debugger is intended to be used by security researchers in various scenarios, such as:
- Collecting information on the address space of the debuggee - recon phase and exploit development
- Exploring functionality of the original executable by accessing and executing selected code snippets
- Adding and testing new functionality using custom debugger instructions
We have successfully used "Scout" as a debugger in a Linux Kernel setup, and in several embedded firmware research projects, and so we believe that it's extendable API could prove handy for other security researchers in their research projects.
Read The Docs
https://scout-debugger.readthedocs.io/
Supported Architectures
- x86 - Intel 32 bit
- x64 - Intel 64 bit
- ARM 32 bit - Little & Big endian (Including Thumb mode)
- MIPS 32 bit - Little & Big endian (Without Mips16 mode)
Future Architectures
- ARM 64 bit - Little & Big endian
- MIPS 16 bit - Little & Big endian
- MIPS 64 bit - Little & Big endian
- ...
Supported Operating Systems
- Linux - User-mode (PC Mode)
- Linux - Kernel-mode (PC Mode)
- Any Posix-like operating system (Embedded Mode)
Folder Structure
- docs: Useful tutorials regarding each unique module of the debugger, including documentation of the API used for custom extensions
- embedded_scout: Example project for an embedded debugger scenario, i.e. a debugger that is injected into the address space of a debuggee firmware
- kernel_scout: Linux kernel driver-based debugger, including a proxy user mode process used for transparent network access
- manager: Python layer for communicating with the debuggee (usually over a TCP connection)
- scout: C code of the basic scout debugger
- tests: A testing utility for PIC based debuggers
- utils: Useful python compilation scripts
Credits
This projects combines together design and compilation tricks that I learned from many fellow researchers during the years.
Links
Scout was developed and used in our following research projects:
- Check Point Research - RCE over the FAX protocol
- Check Point Research - Say Cheese - Ransomware-ing A DSLR Camera
- Check Point Research - Don't be Silly - It's Only a Lightbulb
- Check Point Research - Would you like some RCE with your Guacamole?
- Check Point Research - Linux Kernel MMap vulnerabilities
Contact
Eyal Itkin (eyalit at checkpoint dot com)
Note that the project description data, including the texts, logos, images, and/or trademarks,
for each open source project belongs to its rightful owner.
If you wish to add or remove any projects, please contact us at [email protected].