https://vlang.io/
After open the binary with radare in debug mode "-d" we proceed to do the binary recursive analysis with "aaaa" the more a's the more deep analys.
The function names are modified when the binary is crafted, if we have a function named hello in a module named main we will have the symbol main__hello, but we can locate them quicly thanks to radare's grep done with "~" token in this case applied to the "afl" command which lists all the symbols.
Being in debug mode we can use "d*" commands, for example "db" for breakpointing the function and then "dc" to start or continue execution.
Let's dissasemble the function with "pD" command, it also displays the function variables and arguments as well, note also the xref "call xref from main"
Let's take a look to the function arguments, radare detect's this three 64bits registers used on the function.
Actually the function parameter is rsi that contains a testing html to test the href extraction algorithm.
The string structure is quite simple and it's plenty of implemented methods.
With F8 we can step over the code as we were in ollydbg on linux.
Note the rip marker sliding into the code.
We can recognize the aray creations, and the s.index_after() function used to find substrings since a specific position.
If we take a look de dissasembly we sill see quite a few calls to tos3() functions.
Those functions are involved in string initialization, and implements safety checks.
- tos(string, len)
- tos2(byteptr)
- tos3(charptr)
In this case I have a crash in my V code and I want to know what is crashing, just continue the execution with "dc" and see what poits the rip register.
In visual mode "V" we can see previous instructions to figure out the arguments and state.
We've located the crash on the substring operation which is something like "s2 := s1[a..b]" probably one of the arguments of the substring is out of bounds but luckily the V language has safety checks and is a controlled termination:
Switching the basic block view "space" we can see the execution flow, in this case we know the loops and branches because we have the code but this view also we can see the tos3 parameter "href=" which is useful to locate the position on the code.
When it reach the substr, we can see the parameters with "tab" command.
Looking the implementation the radare parameter calculation is quite exact.
Let's check the param values:
so the indexes are from 0x0e to 0x24 which are inside the buffer, lets continue to next iteration,
if we set a breakpoint and check every iteration, on latest iteration before the crash we have the values 0x2c to 0x70 with overflows the buffer and produces a controlled termination of the v compiled process.
Continue reading
- Hacker Tools 2019
- What Is Hacking Tools
- Hack App
- Hack Tools Download
- Hack Tools For Ubuntu
- Hacking Tools For Windows
- Pentest Tools For Android
- Best Pentesting Tools 2018
- Hacking Tools Github
- Hack Apps
- Hacker Tools Software
- Github Hacking Tools
- Growth Hacker Tools
- Hacking Tools Free Download
- Pentest Tools Port Scanner
- Best Hacking Tools 2019
- Github Hacking Tools
- Hack Tool Apk No Root
- Pentest Tools Website Vulnerability
- Pentest Tools For Android
- Hack Tools For Mac
- Hacking Tools For Mac
- Hacker Tools Free Download
- Pentest Reporting Tools
- Physical Pentest Tools
- Pentest Tools Bluekeep
- Hacking Tools For Windows
- Pentest Tools For Android
- Hacker Tools Apk
- Pentest Tools Android
- Hacking Tools 2019
- Hacker Tools Github
- Termux Hacking Tools 2019
- Pentest Tools Open Source
- Termux Hacking Tools 2019
- Hacker Search Tools
- Pentest Tools Download
- Hacks And Tools
- Hacking Tools For Kali Linux
- Underground Hacker Sites
- Hacking Tools Windows
- Pentest Tools Subdomain
- Hacker Tools For Mac
- Hack Tool Apk
- Pentest Box Tools Download
- Pentest Tools For Ubuntu
- Hacking Tools For Pc
- Pentest Tools Tcp Port Scanner
- Pentest Automation Tools
- Hack Tools For Windows
- Hacking Tools For Kali Linux
- Hacker Tools 2020
- Pentest Tools For Mac
- Tools Used For Hacking
- Hack Tools 2019
- Tools 4 Hack
- Usb Pentest Tools
- Pentest Tools Download
- Top Pentest Tools
- Hacker Tools Github
- Hacker Tools List
- Pentest Tools Online
- Nsa Hack Tools Download
- Pentest Tools Download
- Hacking Tools For Windows 7
- Install Pentest Tools Ubuntu
- Hacking Tools For Windows
- Hacker Tools Software
- Pentest Tools Website Vulnerability
- Hacking Tools And Software
- Hacking Tools Github
- Computer Hacker
- Hacker Tools For Mac
- Hacking Tools For Windows 7
- Tools Used For Hacking
- Pentest Tools Framework
- Ethical Hacker Tools
- Pentest Tools Nmap
- Hacking Tools Download
- Hack Rom Tools
- Hack Apps
- Hacker Tools For Mac
- Pentest Tools Android
- Pentest Tools Alternative
- Wifi Hacker Tools For Windows
- Hacking Tools And Software
- Hacker
- Hacking Tools Download
- Hacker Hardware Tools
- Hack App
- Hacking Tools Mac
- How To Hack
- Hack Tools
- Beginner Hacker Tools
- How To Make Hacking Tools
- Top Pentest Tools
- Hacking Tools Free Download
- Hack Tools
- Hacking Tools And Software
- Hack Tools 2019
- Hack Tools
- Hack Tools Mac
- Top Pentest Tools
- Pentest Tools For Mac
- Pentest Tools Open Source
- Black Hat Hacker Tools
- Pentest Automation Tools
- Hacker Tools Apk
- Pentest Tools Alternative
- Hacks And Tools
- Hacking Tools 2019
- Install Pentest Tools Ubuntu
- Hack Tools
- Hacker Tools 2020
- Hacking Apps
- Pentest Tools Tcp Port Scanner
- Best Hacking Tools 2019
- Hack Tools Github
- Hacker Tools Free
- Hacking Tools Windows
- Hacker Tools Free Download
- Hacking Tools For Games
- Pentest Tools For Windows
- Hacking Tools Usb
- Hack Tools For Windows
- Hacking Tools Windows 10
- Hacking Tools And Software
- Growth Hacker Tools
- Termux Hacking Tools 2019
- Pentest Tools Online
- Beginner Hacker Tools
- Hack Tools For Pc
- Wifi Hacker Tools For Windows
- Pentest Tools Nmap
- Usb Pentest Tools
- Hacking Tools Windows 10
- Android Hack Tools Github
- Hacker
- Pentest Recon Tools
No hay comentarios:
Publicar un comentario