How to access to the serial-shell after enable it? about asafw HOT 3 CLOSED

I figured out the cause of device crash when enabling --debug-shell in my case. I looked the lina binary with shell injected, a hard-coded address (socks_proxy_server_start) was used. But I didn't add the --disable-aslr option when repacking the qcow2.
So when enabling debug-shell, one need to add both the --debug-shell and --disable-aslr option.

from asafw.

You are right about everything.

• you need to disable ASLR when using --debug-shell as you figured out we don't support resolving lina adresses on the fly
• for the serial shell, the option -serial telnet:127.0.0.1:15002 basically says to forward the serial port inside ASA (QEMU) to the outside world (the host machine) on TCP port 15002. So you can access it with nc 127.0.0.1 15002

If everything works for you, feel free to close the issue.

from asafw.

@saidelike Thanks.

Using nc 127.0.0.1 15002 works well for me.

As to enabling debugshell with --debug-shell option, I have made it work without needing to disable ASLR. That is, for some newer images such as asav9101.qcow2, which have trouble in disabling ASLR at the moment, the debugshell can work well.

I'll create a pull request later.

from asafw.