cetfor

import argparse
import binaryninja
import sys
import tempfile
import time
import math
import os

from multiprocessing import Pool, TimeoutError, cpu_count

cetfor

#Checks system calls for command injection patterns
#@author 
#@category HackOvert
#@keybinding 
#@menupath 
#@toolbar 

from ghidra.app.decompiler import DecompileOptions
from ghidra.app.decompiler import DecompInterface
from ghidra.program.model.pcode import Varnode

cetfor

import binaryninja

sources = [
    'snprintf', # int snprintf ( char * s, size_t n, const char * format, ... );
    'sprintf',  # int sprintf  ( char * s, const char * format, ... );
]

sinks = [
    'system',   # int system(const char *command);
]

cetfor

// Challenge from:
// https://www.reddit.com/r/ExploitDev/comments/gv72xr/reverse_engineer_passphrase_check/

#include <stdio.h>
#include <string.h>

int check(char* input) {
    if (strlen(input) != 15) {
        return 0;
    } else {