Hacker News new | ask | show | jobs
by 0xquad 2050 days ago
Is there a database of already analyzed objects? For example, can I search on the sha256sum of my IoT device's firmware and see if someone else has done the heavy lifting?
3 comments

No.

I know IDA has a "Lumina" database.

https://www.hex-rays.com/products/ida/lumina/

Someone has made a public "Lumina" database for IDA.

https://lumen.abda.nl/

If you don't have a legit copy of IDA, you can always pirate a copy and use that public "Lumina" server.

If there was any public documentation on the "Lumina" protocol, one could create a Ghidra plugin that interacts with the server. Sadly, I don't have a copy of IDA (and therefore cannot reverse engineer the protocol) and the author of lumen.abda.nl hasn't released the source code.
V Nice. Thanks for the Lumen link.
That would be awesome, like GhidraHub or something

I'm not well versed in the legality of publishing those databases, as some discussions I've heard elsewhere treat them the same as the object code they annotate and thus it would be like publishing the .exe from Photoshop. I would guess it's possible to separate the annotations from the object code, similar to the way subtitle files are shared for the movies, but similar to a wrong subtitle file, it would take some doing to discover it and more doing to try and rescue the annotations if they could apply to a slightly different but still applicable binary

I'm sure Ghidra's creator's have one
Hehe yeah, but it's a Cassandra cluster ;)