mirror of https://github.com/ConsenSys/mythril
blockchainethereumsmart-contractssoliditysecurityprogram-analysissecurity-analysissymbolic-execution
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
108 lines
3.0 KiB
108 lines
3.0 KiB
#!/usr/bin/env python
|
|
"""mythril.py: Bug hunting on the Ethereum blockchain
|
|
|
|
http://www.github.com/b-mueller/mythril
|
|
"""
|
|
|
|
from ether import asm,evm,util
|
|
from contractstorage import ContractStorage
|
|
import sys
|
|
import argparse
|
|
from rpc.client import EthJsonRpc
|
|
|
|
|
|
def searchCallback(address):
|
|
print(address)
|
|
|
|
def exitWithError(message):
|
|
print(message)
|
|
sys.exit()
|
|
|
|
|
|
parser = argparse.ArgumentParser(description='Bug hunting on the Ethereum blockchain')
|
|
|
|
parser.add_argument('-d', '--disassemble', action='store_true', help='disassemble, use with -c or -a')
|
|
parser.add_argument('-t', '--trace', action='store_true', help='trace, use with -c or -a and --data (optional)')
|
|
parser.add_argument('-c', '--code', help='hex-encoded bytecode string ("6060604052...")', metavar='BYTECODE')
|
|
parser.add_argument('-a', '--address', default='0x0123456789ABCDEF0123456789ABCDEF01234567', help='contract address')
|
|
parser.add_argument('-o', '--outfile')
|
|
parser.add_argument('--data', help='message call input data for tracing')
|
|
parser.add_argument('--search', help='search the contract database')
|
|
parser.add_argument('--init-db', action='store_true', help='Initialize the contract database')
|
|
parser.add_argument('--rpchost', default='127.0.0.1', help='RPC host')
|
|
parser.add_argument('--rpcport', type=int, default=8545, help='RPC port')
|
|
|
|
|
|
storage = ContractStorage()
|
|
|
|
|
|
args = parser.parse_args()
|
|
|
|
if (args.disassemble):
|
|
|
|
if (args.code):
|
|
encoded_bytecode = args.code
|
|
elif (args.address):
|
|
|
|
try:
|
|
# encoded_bytecode = storage.get_contract_code_by_address(args.id)
|
|
|
|
eth = EthJsonRpc(args.rpchost, args.rpcport)
|
|
|
|
encoded_bytecode = eth.eth_getCode(args.address)
|
|
|
|
except Exception as e:
|
|
exitWithError("Exception loading bytecode via RPC: " + str(e))
|
|
elif (args.infile):
|
|
|
|
try:
|
|
|
|
encoded_bytecode = util.file_to_string(args.infile).rstrip()
|
|
|
|
except Exception as e:
|
|
exitWithError("Exception loading bytecode from file: " + str(e))
|
|
|
|
else:
|
|
exitWithError("Disassembler: Provide the input bytecode via -c BYTECODE or --id ID")
|
|
|
|
disassembly = asm.disassemble(util.safe_decode(encoded_bytecode))
|
|
|
|
easm_text = asm.disassembly_to_easm(disassembly)
|
|
|
|
if (args.outfile):
|
|
util.string_to_file(args.outfile, easm_text)
|
|
else:
|
|
sys.stdout.write(easm_text)
|
|
|
|
elif (args.trace):
|
|
|
|
if (args.code):
|
|
encoded_bytecode = args.code
|
|
|
|
elif (args.address):
|
|
|
|
eth = EthJsonRpc(args.rpchost, args.rpcport)
|
|
|
|
encoded_bytecode = eth.eth_getCode(args.address)
|
|
|
|
else:
|
|
exitWithError("Disassembler: Provide the input bytecode via -c BYTECODE or --id ID")
|
|
|
|
if (args.data):
|
|
output = evm.trace(util.safe_decode(encoded_bytecode), args.address, args.data)
|
|
|
|
else:
|
|
output = evm.trace(util.safe_decode(encoded_bytecode), args.address)
|
|
|
|
print(output)
|
|
|
|
|
|
elif (args.search):
|
|
|
|
storage.search(args.search, searchCallback)
|
|
|
|
elif (args.init_db):
|
|
storage.initialize(args.rpchost, args.rpcport)
|
|
|
|
else:
|
|
parser.print_help()
|
|
|