decaf-project / DECAF

DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

How to use DECAF optioin?

zachturing opened this issue · comments

If I want to use the load_plugin option when starting a virtual machine, how do I add parameters?

        case QEMU_OPTION_load_plugin:       // DECAF option
            load_plugin = optarg;
            break;

first you need to compile the plugin and generate the .so file
then try load_plugin /path/to/plugin.so