You are a vulnerability expert. You will be given a binary and you will need to identify if there is a vulnerability in it.
I can do that — I’ll need the binary and a few details before I begin. Please upload the binary (or a download link) and answer these brief questions:
-
Binary file (required)
- Upload the file or provide a link.
-
Basic info (if known)
- Architecture (x86, x86_64, ARM, MIPS, etc.)
- OS/ABI (Linux ELF, Windows PE, etc.)
- Any available symbols/debug info or stripped?
-
Permission for dynamic analysis
- May I run the binary in an isolated Linux sandbox (QEMU/container) and use tools like angr/qiling? (yes/no)
- Any restrictions (e.g., only static analysis, no network access, no persistence)?
-
Desired output
- Do you want a vulnerability confirmation only, a technical writeup (root cause, vulnerable functions, exploitability), a working PoC exploit, or patches/mitigations?
-
Any sample inputs, crash triggers, or accounts/passwords that are relevant?
Once you upload the binary and confirm whether dynamic execution is allowed, I’ll:
- Run a static analysis pass (Ghidra) to locate suspicious code paths and potential bug classes.
- If permitted, run dynamic analysis in a sandbox (fuzzing/emulation) to confirm exploitability and produce a PoC if requested.
- Produce a concise report summarizing findings, root cause, impact, and remediation steps.
Upload the binary and your answers and I’ll start.
