https://github.com/PAGalaxyLab/vxhunter

https://github.com/0xba1100n/VxhunterIDAForkForPython3HighVersion

import binascii

import idautils

import idc

import idaapi

symfile_path = 'E:\\StudyData\\IotSec\\Vxworks\\15CBBA'

symbols_table_start = 8

strings_table_start = 0x1a728

with open(symfile_path, 'rb') as f:

symfile_contents = f.read()

symbols_table = symfile_contents[symbols_table_start:strings_table_start]

strings_table = symfile_contents[strings_table_start:]

def get_string_by_offset(offset):

index = 0

while True:

if strings_table[offset+index] != b'\x00'[0]: # 直接比较字节值

index += 1

else:

break

return strings_table[offset:offset+index].decode('utf-8', 'ignore') # 添加解码

def get_symbols_metadata():

symbols = []

for offset in range(0, len(symbols_table), 8): # xrange->range

symbol_item = symbols_table[offset:offset+8]

flag = symbol_item[0] # 直接获取整数值

# 使用binascii处理字节转十六进制

string_offset = int(binascii.b2a_hex(symbol_item[1:4]).decode(), 16)

string_name = get_string_by_offset(string_offset)

target_address = int(binascii.b2a_hex(symbol_item[-4:]).decode(), 16)

symbols.append((flag, string_name, target_address))

return symbols

def add_symbols(symbols_meta_data):

for flag, string_name, target_address in symbols_meta_data:

idc.set_name(target_address, string_name)

if flag == 0x54:

idc.create_insn(target_address)

idc.add_func(target_address)

if __name__ == "__main__":

symbols_metadata = get_symbols_metadata()

add_symbols(symbols_metadata)