Qinisekisa Ukuhlaziywa Kwamafayela Kanambambili Okusizwa yi-AI nge-Reverify

Lokho Okwenziwa yi-Reverify

I-Reverify iyithuluzi lokuhlehlisa ubunjiniyela elisizwa yi-AI, elakhelwe ukunciphisa izincazelo ezingamanga ngesikhathi kuhlaziywa ama-binary. Esikhundleni sokuthembela ekwakhiweni kabusha okwenziwa yimodeli yolimi, i-Reverify ikubheka njengombono bese iyawuhlola iqhathanisa ne-binary yangempela.

Indlela yokusebenza ilula: imodeli iphakamisa, amathuluzi anqumayo aqinisekise. I-Reverify ingahlukanisa ama-byte, iskene amaphethini, ihlaziye amafomethi asebenzisekayo, ikhiphe izintambo zombhalo, ilingise ikhodi, futhi ihlole amafomethi okuxhumana. Isimangalo esihloliwe sithola omunye wemiphumela emithathu: VERIFIED, REFUTED, noma INCONCLUSIVE, kanye nobufakazi obubonwe.

Sebenzisa i-Reverify kuphela ekuhlehliseni ubunjiniyela okugunyaziwe, njengokuhlaziywa kohlelo olungayilungele ikhompuyutha, izinselele ze-CTF, ucwaningo lokusebenzisana kwezinhlelo, kanye nesofthiwe okungeyakho noma onemvume yokuyihlola.

Izici Eziyinhloko

• Ukuqinisekisa okunqumayo: Izimangalo zahlulelwa ngama-byte abonwe ku-binary ehlosiwe, kunokuba zamukelwe encazelweni ekhiqizwe yi-AI.
• Ukuhlaziya amafayela asebenzisekayo: Hlola amafayela e-PE, ELF, ne-Mach-O, okuhlanganisa i-architecture, indawo yokuqala, izigaba, ama-imports, nama-exports lapho kusekelwa khona.
• Ukuhlukanisa ikhodi nokulingisa: Hlaziya ikhodi ye-x86, x64, ARM, ne-ARM64, ngamakhono ancike kuma-backend asebenzayo.
• Ukuhlaziya amaphethini nezintambo: Skena amaphethini e-AOB usebenzisa ama-wildcard e-??, bese ukhipha izintambo ze-ASCII noma ze-UTF-16LE ezinezindawo zazo.
• Ukuhlola amaphrothokholi: Decode idatha ye-Protobuf ne-TLV ngaphandle kokudinga i-schema.
• Amathuluzi okuhlehlisa ubunjiniyela: Khiqiza ama-hook e-Frida, dala ama-hex dump aqondaniswe kahle, bese ukhiqiza ama-binary diff noma ama-patch.
• Ukuhlanganiswa nama-agent: Sebenzisa i-Reverify njengeseva ye-Model Context Protocol kumathuluzi afana ne-Claude Code ne-Cursor.
• Enye indlela ye-Pure-Python: Iphakheji eyisisekelo isebenza ngaphandle kwe-Ghidra noma kwezinjini zomdabu zokuhlaziya ezidingekayo.

Ukufaka Nokulungisa

Faka I-Core ye-Pure-Python

Faka i-CLI kanye neseva ye-MCP kusuka ku-PyPI:

pip install reverify

Lokhu kunikeza i-core ye-pure-Python futhi kuyindlela elula yokuqala.

Faka Izinjini Ezivuthiwe Ongazikhetha

Ukuze uthole ukuhlaziya okuthuthukisiwe, ukuhlukanisa ikhodi, nokulingisa, faka i-extra ephelele:

pip install "reverify[full]"

Ukufakwa okuphelele kwenza i-Reverify isebenzise i-Capstone ekuhlukaniseni ikhodi, i-Unicorn ekulingiseni i-CPU, kanye ne-LIEF ekuhlaziyeni i-PE, ELF, ne-Mach-O. Uma la mapakheji engatholakali, i-Reverify ibuyela ekusetshenzisweni kwayo kwe-pure-Python.

Hlola ukuthi yiziphi izinjini ezisebenzayo:

reverify backends

Qalisa Ngokuqondile Ku-Checkout

Indawo yokugcina ikhodi ingasetshenziswa futhi ngaphandle kokufaka iphakheji:

python reverify/cli.py auto sample.bin --json
python reverify/cli.py parse-pe sample.exe --json
python reverify/cli.py disasm 90505831C0C3 --arch x86_64

Ukuhlolwa Kokuqala Kwe-Binary

Qala ngomyalo we-auto ukuze uthole ifomethi yefayela ne-architecture, uhlole izigaba, futhi ubike izintambo ezibalulekile:

reverify auto sample.bin --json

Inketho ye---json iyasiza lapho esinye iskripthi, umsebenzi we-CI, noma i-AI agent idinga ukusebenzisa umphumela ngohlelo.

Ukuhlaziya ifayela elisebenzisekayo ngokugxila, sebenzisa i-parse kumafayela e-PE, ELF, noma Mach-O:

reverify parse sample.bin --json

Efayeleni elisebenzisekayo le-Windows, i-PE parser ezinikele ingahlola ama-header e-PE32 noma e-PE32+, ama-imports, nama-exports:

reverify parse-pe sample.exe --json

Ukuhlukanisa Ama-Byte Angahluziwe

Umyalo we-disasm ungakwazi ukuqopha ikhodi yomshini ye-hexadecimal. Lesi sibonelo sihlaziya ukulandelana okufushane kwe-x86-64:

reverify disasm 90505831C0C3 --arch x86_64

Ukuhlukanisa ikhodi kusiza ekuhloleni ukuthi ukulandelana kwemiyalelo okuphakanyisiwe kuyahambisana yini nama-byte. I-Reverify ingahlukanisa futhi ikhodi esesigabeni se-binary, okwenza izimangalo zixhunywe nokuqukethwe kwefayela kunokuthembela ekuchazeni okukhiqizwe yimodeli kuphela.

Ukusebenzisa Umjikelezo Wokuqinisekisa

Isimangalo se-Reverify siwumbono ohlelekile mayelana ne-binary. Umyalo we-verify uhlola lesi simangalo bese ubuyisa isimo saso kanye nobufakazi obubonwe yithuluzi.

Qinisekisa Ukulandelana Kwemiyalelo

Lesi simangalo esilandelayo sihlola ukuthi ama-byte asendaweni ethi 4096 aqopha yini i-prologue yomsebenzi eqala ngo-push, mov, kanye ne-sub:

reverify verify sample.bin --claim '{
  "kind": "instructions",
  "offset": 4096,
  "mnemonics": ["push", "mov", "sub"],
  "note": "function prologue"
}'

I-Reverify ayiphindi nje incazelo ephakanyisiwe. Ifunda futhi ihlukanise ama-byte afanele, bese ibika ukuthi ukulandelana kwama-mnemonic okuceliwe kusekelwa yini.

Qinisekisa Umphumela Olingisiwe

Ungahlola futhi isimangalo sokuziphatha ngokusebenzisa ikhodi yomshini ku-emulator bese uhlola amarejista aphumayo:

reverify verify - --claim '{
  "kind": "emulate_result",
  "code": "b805000000b90300000001c8c3",
  "arch": "x86",
  "expect_registers": {"eax": 8}
}'

Lokhu kuqinisekisa ukuthi le nqubo enikeziwe ishiya i-eax ilingana no-8. Kuwukuhlola okuqinile kunokwamukela incazelo yemodeli mayelana nalokho imiyalelo ebonakala ikubala.

Izinhlobo Zezimangalo Ezitholakalayo

I-Reverify isekela lezi zinhlobo zezimangalo:

• bytes_at ihlola amabhayithi asendaweni ethile.
• pattern_present ihlola ukuthi iphethini yamabhayithi ikhona yini.
• string_present ihlola ukuthi kukhona yini iyunithi yombhalo ku-binary.
• instructions ihlola ukulandelana kwemiyalelo okuhlongozwayo.
• emulate_result ihlola imiphumela elindelekile yama-register ngemva kwe-emulation.
• protobuf_field ihlola isimangalo senkambu ye-Protobuf.
• pe_import ihlola isimangalo se-PE import.

Ukuqinisekisa Ngenqwaba Nokulawula Kwe-CI

Uma uphenyo lukhulu, faka izimangalo eziningi efayeleni le-JSON bese uziqinisekisa ndawonye:

reverify verify sample.bin --claims-file claims.json

I-CLI iphuma ngesimo esingeyena uziro uma kukhona noma yisiphi isimangalo esiphikisiwe. Lokhu kuyenza ifanelekele amapayipi e-CI kanye nezinqubo ezizenzakalelayo zama-agent: isakhiwo noma i-routine eyakhiwe kabusha inganqatshwa ngaphambi kokuthi ishicilelwe noma isetshenziswe yisinyathelo esilandelayo.

Inqubo esebenzayo yile:

1. Sebenzisa auto, parse, strings, noma disasm ukuqoqa ubufakazi bokuqala.
2. Yenza umhlaziyi noma imodeli yakhe izimangalo ezinomkhawulo ocacile.
3. Gcina izimangalo ezihlobene efayeleni le-JSON.
4. Qalisa verify bese uhlola yonke imiphumela ethi REFUTED noma INCONCLUSIVE.
5. Lungisa kabusha ukwakhiwa bese uphinda kuze kube izimangalo ezisekelwayo zisekelwe ebufakazini obubonwe.

Imiyalo Eyengeziwe Yokuhlaziya

I-Reverify inemiyalo eminingana egxile emisebenzini ethile engasekela inqubo yokuqinisekisa:

• Ukuskena amaphethini: Sebenzisa pattern-scan ekusesheni kwe-AOB okunamabhayithi aqondile nama-wildcard e-??.
• Ukukhipha iyunithi yombhalo: Sebenzisa strings ukuthola iyunithi yombhalo ye-ASCII ne-UTF-16LE futhi ugcine ama-offset ayo.
• I-micro-emulation: Sebenzisa emulate ukuhlola ukuziphatha kwama-register e-CPU kanye ne-stack.
• Ukuhlukanisa ifomethi ye-wire: Sebenzisa decode-protobuf noma decode-tlv ekuhlaziyeni idatha engena-schema.
• Ukuhlanganiswa ne-Frida: Sebenzisa gen-hook ukukhiqiza iskripthi se-interceptor.
• Ukuhlola okuluhlaza: Sebenzisa hexdump ukuze ubone idatha ye-binary ihlelwe ngokuvumelana.
• Ukuhlaziya izinguquko: Sebenzisa diff-patch uma kuqhathaniswa ama-binary futhi kukhiqizwa ama-patch.
• Ukuhlola imingcele: Sebenzisa audit-boundary ekuhloleni kokuzivikela kwemingcele yesistimu yamafayela kanye ne-SSRF.

Ukuhlanganisa Kabusha Nenqubo Yokwakha

Umyalo we-reconstruct usebenzisa indlela ye-Reverify enomjikelezo ovaliwe: imodeli iphakamisa izimangalo, amathuluzi anqumayo ayazihlola, bese inqubo iphindaphinda ize ifinyelele kumphumela osekelwe ebufakazini. Lokhu kungcono kunokucela imodeli ukuthi inikeze isakhiwo noma i-algorithm ephelele bese kuthathwa impendulo yayo yokuqala njengeyiqiniso eliphelele.

Ukuze uthole imiphumela ethembekile, gcina izimangalo zincane futhi zihlolakala. Isimangalo ngamabhayithi aqondile, ukulandelana okufushane kwemiyalelo, umsebenzi o-importiwe, noma umphumela we-register kulula ukusiqinisekisa nokusilungisa kunendaba ebanzi mayelana nayo yonke i-binary.

Ukuxhumanisa I-Reverify Nama-Agent E-AI

Qalisa iseva ye-MCP usendaweni yokukhipha ikhodi ye-repository:

python reverify/mcp_server.py

Ungabe usulungiselela iklayenti elihambisana ne-MCP njenge-Claude Code noma i-Cursor ukuze liqalise iseva. I-agent ingabiza ngokuqondile amathuluzi e-Reverify okuhlaziya, e-disassembly, okuskena, nawokuqinisekisa.

Ithuluzi le-MCP elithi re_verify_claim livulela ama-agent lo mjikelezo ofanayo wokuqinisekisa. Lokhu kuvumela i-agent ukuthi ithumele umbono, yamukele VERIFIED, REFUTED, noma INCONCLUSIVE, bese ilungisa ukuhlaziya kwayo ngaphambi kokubika isiphetho.

Amaqhinga Athuthukile

• Hlola ama-backend asebenzayo kuqala: Qalisa reverify backends ngaphambi kokuhlaziya ukuze wazi ukuthi i-Capstone, i-Unicorn, ne-LIEF ziyatholakala yini.
• Khetha okukhiphayo kwe-JSON: Sebenzisa --json lapho imiphumela izohlaziywa yimibhalo, ama-agent, noma amasistimu e-CI.
• Hlukanisa okuboniwe ekuchazeni: Rekhoda ama-offset, amabhayithi, imiyalelo e-decode- iweyo, kanye nezimo zama-register ngaphambi kokubhala incazelo esezingeni eliphezulu.
• Phatha imiphumela engaphelele ngobuqotho: Umphumela othi INCONCLUSIVE awusikho ukuqinisekiswa. Qoqa obunye ubufakazi noma nciphisa ububanzi besimangalo.
• Hlanganisa iziqinisekiso ezihlobene: Faka ukuhlolwa kwesakhiwo nokuziphatha efayeleni lezimangalo ukuze ukucabanga okukodwa okuphikisiwe kumise ukwakhiwa kabusha okuzenzakalelayo.
• Sebenzisa i-emulation ezimangalweni zokuziphatha: Uma isimangalo sisho ukuthi i-routine ibalani, qinisekisa isimo esilindelekile sama-register kunokuthembela kuphela ku-disassembly.
• Sebenzisa i-fallback ye-Pure Python ukuze kube nokuphatheka: Qala ngephakheji eyisisekelo, bese ufaka reverify[full] lapho kudingeka izinjini zomdabu ezivuthiwe.

Isiphetho

I-Reverify yenza i-reverse engineering esizwa yi-AI ithembeke futhi ivikeleke kakhudlwana ngokudinga ukuthi izimangalo ezibalulekile ziphumelele ekuhlolweni okunqumayo okwenziwa ku-binary. I-CLI yayo isekela ukuhlolwa kokuqala okusheshayo, ukuhlaziya, i-disassembly, ukuskena amaphethini, i-emulation, nokuqinisekisa ngenqwaba, kuyilapho iseva yayo ye-MCP inikeza ama-agent e-AI ukufinyelela kunqubo efanayo esekelwe ebufakazini. Umphumela uwukuhlaziya okusekelwe kumabhayithi abonwe kunokuqagela okuzwakala kuqinisekile.

I-Reverify inelayisensi ye-MIT futhi iyatholakala ku-PyPI.