https://vlang.io/
After open the binary with radare in debug mode "-d" we proceed to do the binary recursive analysis with "aaaa" the more a's the more deep analys.
The function names are modified when the binary is crafted, if we have a function named hello in a module named main we will have the symbol main__hello, but we can locate them quicly thanks to radare's grep done with "~" token in this case applied to the "afl" command which lists all the symbols.
Being in debug mode we can use "d*" commands, for example "db" for breakpointing the function and then "dc" to start or continue execution.
Let's dissasemble the function with "pD" command, it also displays the function variables and arguments as well, note also the xref "call xref from main"
Let's take a look to the function arguments, radare detect's this three 64bits registers used on the function.
Actually the function parameter is rsi that contains a testing html to test the href extraction algorithm.
The string structure is quite simple and it's plenty of implemented methods.
With F8 we can step over the code as we were in ollydbg on linux.
Note the rip marker sliding into the code.
We can recognize the aray creations, and the s.index_after() function used to find substrings since a specific position.
If we take a look de dissasembly we sill see quite a few calls to tos3() functions.
Those functions are involved in string initialization, and implements safety checks.
- tos(string, len)
- tos2(byteptr)
- tos3(charptr)
In this case I have a crash in my V code and I want to know what is crashing, just continue the execution with "dc" and see what poits the rip register.
In visual mode "V" we can see previous instructions to figure out the arguments and state.
We've located the crash on the substring operation which is something like "s2 := s1[a..b]" probably one of the arguments of the substring is out of bounds but luckily the V language has safety checks and is a controlled termination:
Switching the basic block view "space" we can see the execution flow, in this case we know the loops and branches because we have the code but this view also we can see the tos3 parameter "href=" which is useful to locate the position on the code.
When it reach the substr, we can see the parameters with "tab" command.
Looking the implementation the radare parameter calculation is quite exact.
Let's check the param values:
so the indexes are from 0x0e to 0x24 which are inside the buffer, lets continue to next iteration,
if we set a breakpoint and check every iteration, on latest iteration before the crash we have the values 0x2c to 0x70 with overflows the buffer and produces a controlled termination of the v compiled process.
Related word
- Pentest Tools Nmap
- Hacker Tools List
- Hacking Tools For Windows Free Download
- Pentest Tools For Mac
- Hack Website Online Tool
- Install Pentest Tools Ubuntu
- Hack Rom Tools
- Ethical Hacker Tools
- Pentest Tools Download
- Hackrf Tools
- Github Hacking Tools
- Physical Pentest Tools
- Hacking Tools For Windows
- Hacker Tools
- How To Make Hacking Tools
- Install Pentest Tools Ubuntu
- Pentest Tools Tcp Port Scanner
- Black Hat Hacker Tools
- Pentest Tools Android
- Hack Tool Apk
- Hacker Tools For Windows
- Hack Tools Online
- Hack Tools Mac
- Hack Tools
- Pentest Tools List
- Hacking Tools For Mac
- Pentest Tools Open Source
- Hacker Tools Mac
- New Hacker Tools
- Hacking Tools Online
- Pentest Tools Free
- Android Hack Tools Github
- Hack App
- Usb Pentest Tools
- Hack Tool Apk
- Github Hacking Tools
- Hacking Tools Windows
- Hacking Tools Name
- Hacking Tools Windows
- How To Make Hacking Tools
- Underground Hacker Sites
- How To Make Hacking Tools
- Hacking Tools Github
- Pentest Tools Website
- Hacking Tools 2019
- Hack Tools
- Pentest Tools Android
- Hacker Tools Apk
- Hack Tools Mac
- Hacker
- Best Hacking Tools 2019
- How To Make Hacking Tools
- Hacker Tools Online
- Hacking Tools Kit
- Hacking Tools Windows
- Hacker Tool Kit
- Pentest Tools Website Vulnerability
- Nsa Hack Tools
- Hacker Search Tools
- Pentest Tools Website Vulnerability
- Hackrf Tools
- Hacker Tools Mac
- Hacker Tool Kit
- Hacking Tools For Beginners
- New Hack Tools
- Tools For Hacker
- Nsa Hacker Tools
- Best Hacking Tools 2020
- Pentest Tools Kali Linux
- Pentest Tools Port Scanner
- Hacking Tools Online
- Hack And Tools
- Hacker Tools For Windows
- Hacker Search Tools
- Tools For Hacker
- How To Hack
- Pentest Tools Review
- Hack Tool Apk
- Hacking Tools 2020
- Hacker Tools
- Pentest Tools Free
- Hacker Tools For Windows
- Hacking Tools Hardware
- Hacking App
- Hack Tools Mac
- Hacking Tools For Games
- Hack App
- Best Hacking Tools 2019
- Hack Tools Mac
- Hack App
- Free Pentest Tools For Windows
- Best Hacking Tools 2019
- Hack Tools Download
- Pentest Recon Tools
- Top Pentest Tools
- Hackrf Tools
- Hack Tool Apk
- Termux Hacking Tools 2019
- Nsa Hacker Tools
- Computer Hacker
- Hack Tools For Games
- Hacking Tools And Software
- Pentest Tools List
- Pentest Tools List
- Hacker Tools List
- Hacker Tools Software
- Best Hacking Tools 2019
- Hacking Tools For Pc
- Hacker
- Pentest Tools
0 comentarios:
Publicar un comentario