Security analysis tool for EVM bytecode. Supports smart contracts built for Ethereum, Hedera, Quorum, Vechain, Roostock, Tron and other EVM-compatible blockchains.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
mythril/myth

142 lines
4.5 KiB

7 years ago
#!/usr/bin/env python
7 years ago
"""mythril.py: Bug hunting on the Ethereum blockchain
7 years ago
http://www.github.com/b-mueller/mythril
"""
from mythril.ether import evm,util
7 years ago
from mythril.disassembler.disassembly import Disassembly
from mythril.disassembler.callgraph import generate_callgraph
from mythril.ether.contractstorage import get_persistent_storage
from mythril.rpc.client import EthJsonRpc
from ethereum import utils
import binascii
7 years ago
import sys
import argparse
import os
7 years ago
DEFAULT_DB_DIR = os.path.join(os.path.expanduser('~'), ".mythril")
7 years ago
7 years ago
def searchCallback(code_hash, code, addresses, balances):
print("Matched contract with code hash " + code_hash )
for i in range(0, len(addresses)):
print("Address: " + addresses[i] + ", balance: " + str(balances[i]))
7 years ago
def exitWithError(message):
print(message)
sys.exit()
7 years ago
parser = argparse.ArgumentParser(description='Bug hunting on the Ethereum blockchain')
7 years ago
7 years ago
parser.add_argument('-d', '--disassemble', action='store_true', help='disassemble, specify input with -c or -a')
7 years ago
parser.add_argument('-t', '--trace', action='store_true', help='trace, use with -c or -a and --data (optional)')
7 years ago
parser.add_argument('-c', '--code', help='hex-encoded bytecode string ("6060604052...")', metavar='BYTECODE')
7 years ago
parser.add_argument('-a', '--address', default='0x0123456789ABCDEF0123456789ABCDEF01234567', help='contract address')
7 years ago
parser.add_argument('-o', '--outfile')
7 years ago
parser.add_argument('-g', '--graph', help='when disassembling, also generate a callgraph', metavar='OUTPUT_FILE')
7 years ago
parser.add_argument('--data', help='message call input data for tracing')
parser.add_argument('--search', help='search the contract database')
parser.add_argument('--xrefs', help='get xrefs from contract in database', metavar='CONTRACT_HASH')
parser.add_argument('--hash', help='calculate function signature hash', metavar='SIGNATURE')
parser.add_argument('--init-db', action='store_true', help='Initialize the contract database')
7 years ago
parser.add_argument('--sync-all', action='store_true', help='Also sync contracts with zero balance')
parser.add_argument('--rpchost', default='127.0.0.1', help='RPC host')
7 years ago
parser.add_argument('--rpcport', type=int, default=8545, help='RPC port')
7 years ago
try:
db_dir = os.environ['DB_DIR']
except KeyError:
db_dir = DEFAULT_DB_DIR
7 years ago
contract_storage = get_persistent_storage(db_dir)
args = parser.parse_args()
7 years ago
if (args.disassemble):
if (args.code):
encoded_bytecode = args.code
7 years ago
elif (args.address):
7 years ago
try:
7 years ago
eth = EthJsonRpc(args.rpchost, args.rpcport)
encoded_bytecode = eth.eth_getCode(args.address)
7 years ago
except Exception as e:
exitWithError("Exception loading bytecode via RPC: " + str(e))
7 years ago
7 years ago
else:
exitWithError("Disassembler: Provide the input bytecode via -c BYTECODE or --id ID")
7 years ago
try:
disassembly = Disassembly(encoded_bytecode)
# instruction_list = asm.disassemble(util.safe_decode(encoded_bytecode))
except binascii.Error:
exitWithError("Disassembler: Invalid code string.")
7 years ago
easm_text = disassembly.get_easm()
7 years ago
if (args.outfile):
util.string_to_file(args.outfile, easm_text)
else:
sys.stdout.write(easm_text)
7 years ago
if (args.graph):
generate_callgraph(disassembly, args.graph)
7 years ago
elif (args.trace):
7 years ago
if (args.code):
encoded_bytecode = args.code
elif (args.address):
eth = EthJsonRpc(args.rpchost, args.rpcport)
encoded_bytecode = eth.eth_getCode(args.address)
else:
exitWithError("Disassembler: Provide the input bytecode via -c BYTECODE or --id ID")
7 years ago
if (args.data):
output = evm.trace(util.safe_decode(encoded_bytecode), args.address, args.data)
7 years ago
else:
output = evm.trace(util.safe_decode(encoded_bytecode), args.address)
print(output)
7 years ago
elif (args.search):
try:
contract_storage.search(args.search, searchCallback)
except SyntaxError:
exitWithError("Syntax error in search expression.")
elif (args.xrefs):
try:
contract_hash = util.safe_decode(args.xrefs)
except binascii.Error:
exitWithError("Invalid contract hash.")
try:
contract = contract_storage.get_contract_by_hash(contract_hash)
print("\n".join(contract.get_xrefs()))
except KeyError:
exitWithError("Contract not found in the database.")
elif (args.init_db):
7 years ago
contract_storage.initialize(args.rpchost, args.rpcport, args.sync_all)
elif (args.hash):
print(utils.sha3(args.hash)[:4].hex())
else:
7 years ago
parser.print_help()