Difficulties with deploying Joern

[marius-benthin]

If you are having trouble with generating abstract syntax trees from decompiled pseudo code using Bjoern fuzzy parser, I recommend to use this docker image: neepl/joern

Command Sequence

0. Get docker image

docker pull neepl/joern

1. Import C pseudo code

docker run -v "</path/to/pseudo/code/>":/code -p 7474:7474 --rm -w /code neepl/joern java -jar /joern/bin/joern.jar .
docker run -d -v "</path/to/pseudo/code/>":/code -p 7474:7474 neepl/joern /var/lib/neo4j/bin/neo4j console

2. Export abstract syntax tree

docker exec <docker_id> /bin/bash -c "echo 'queryNodeIndex(\"type:Function\").id' | joern-lookup -g | joern-plot-ast | joern-astlabel | joern-ast2features > /code/ast_output.dep"

3. Clean up and remove docker container

docker exec <docker_id> /bin/bash -c "rm -r /code/.joernIndex"
docker kill <docker_id>
docker rm <docker_id>

[TimothyFDavison]

Hey Marius, thanks for putting the docker container together. I'm also attempting to replicate Caliskan's results, and have been having trouble with running the project as it currently sits in GitHub.

One question though -- when executing the above commands through your container, I haven't been able to load all sample C files into the docker, and later the abstract syntax tree command on my machine outputs a single empty .dep file. Have you posted the source code for the docker anywhere that I might check it out? Thanks again!

[marius-benthin]

Hey TimothyFDavison, actually I wasn't able to replicate the abstract syntax tree part too, because the Bjoern fuzzy parser and the documentation seems to be outdated.
Regarding the .dep (abstract syntax tree) file, I only use one C sample per docker. I also noticed that the docker doesn't work with mutiple C files. The docker just contains a Neo4J graph database and the joern tool: https://github.com/octopus-platform/joern.
If you are able to deploy the graph database and joern tool it should also work.