libmwemu 0.24.1

x86 32/64bits and system internals emulator, for securely emulating malware and other stuff.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24

use crate::{tests::helpers, *};

#[test]
// this tests a metasploit rshell of 32bits linux, the tests verify the sockaddr and shell.
pub fn sc32lin_rshell() {
    helpers::setup();

    let mut emu = emu32();
    emu.cfg.maps_folder = "../../maps/maps32/".to_string();

    let sample = "../../test/sc32lin_rshell.bin";
    emu.load_code(sample);
    emu.run_to(31);
    let sockaddr = emu.maps.read_bytes(emu.regs().get_ecx(), 9);
    assert_eq!(
        sockaddr,
        &[
            0x02, 0x00, 0x05, 0x39, 0x01, 0x03, 0x03, 0x07, 0x01
        ][..]
    );

    emu.run_to(42);
    assert_eq!(emu.maps.read_string(emu.regs().get_ebx()), "//bin/sh");
}