Menu
二进制解析函数的安全分析配置(通用)
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
IVAgent 测试与评估工作流。修改代码后运行回归测试、LLM 语义评测和日志分析。当用户要求测试、验证、评估或回归检查时使用。
系统测试通用 workflow：对 IDA 伪代码视图执行自主漏洞挖掘
系统测试 workflow: baseband_nas_tft_overflow_01
系统测试 workflow: baseband_rlc_reassembly_01
系统测试 workflow: bluetooth_gatt_underflow_01
系统测试 workflow: bt_l2cap_fragment_uaf_01
| name | binary-parser |
| description | 二进制解析函数的安全分析配置(通用) |
| engine | ida |
| target_type | binary |
| taint_sources | ["第一个参数: 攻击者控制的数据缓冲区","第二个参数: 数据长度(可能由攻击者指定)"] |
| dangerous_apis | ["memcpy()","strcpy()","strncpy()","sprintf()","snprintf()","malloc()","alloca()"] |
| tags | ["binary","parser","buffer_overflow"] |
需重点检查的函数：
memcpy() / strcpy() / strncpy()sprintf() / snprintf()malloc() / alloca() - 检查分配大小