xoreaxeaxeax/REpsych: Psychological warfare in reverse engineering · GitHub

: Psychological Warfare in Reverse Engineering

github.com/xoreaxeaxeax/repsych // domas // @xoreaxeaxeax

The REpsych toolset is a proof-of-concept illustrating the generation of images
through a program’s control flow
graph (CFG).

A typical function’s CFG	A REpsych generated CFG

There is no specific point to the project (other than to show that it can be
done), but possible (non-serious) applications are outlined in the DEF CON
presentation.

The program works reliably with all tested versions of the IDA Pro reverse
engineering tool, and semi-reliably with other CFG viewers (Hopper, BinNavi,
radare2, etc).

The toolset translates source images into functioning programs, such that the
program’s control flow graph generates the source image.

To generate a new program from an image:

• Save the image in the gfx/ folder as a 24 BPP bitmap.
• Run “make image” in the root directory of the project, where “image” is the
  name of your image, without the extension.

Two functioning programs will be created: repsych_v1 and repsych_v2. Each uses
a different strategy for ensuring the CFG renderer correctly places the CFG
nodes.

The tool will create a basic block (CFG node) for each pixel of the source
image; as such, you should try to use small source images (not larger than
100×100), and you may need to increase the number of allowed nodes in your CFG
viewer.

When using an image of text as input to the tool, first convert the image to a
2 BPP black and white bitmap first, then to a 24 BPP bitmap; this will remove
non black and white colors, and give the best results in the control flow graph.

The technique is outlined in detail in the DEF CON
presentation.

Slides from the presentation are provided
here.

REpsych is a proof-of-concept from Christopher Domas
(@xoreaxeaxeax).