RecoverComparisonSecret
Recover direct or XOR-transformed peer operands from completed strcmp/strncmp/memcmp API traces using a known probe; verify each candidate with an independent launch.
Instructions
Recover comparison candidates from exact API-trace operand evidence.
This consumes completed strcmp/strncmp/memcmp/wide-string calls. With a known probe it distinguishes the user-controlled operand and recovers a direct peer or a single-byte-XOR-transformed peer. A returned candidate must still be verified with an independent launch of the target.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| probe | No | ||
| trace_id | Yes | ||
| overwrite | No | ||
| transform | No | auto | |
| probe_format | No | utf8 | |
| evidence_path | No | ||
| expected_operand | No |