https://vlang.io/
After open the binary with radare in debug mode "-d" we proceed to do the binary recursive analysis with "aaaa" the more a's the more deep analys.
The function names are modified when the binary is crafted, if we have a function named hello in a module named main we will have the symbol main__hello, but we can locate them quicly thanks to radare's grep done with "~" token in this case applied to the "afl" command which lists all the symbols.
Being in debug mode we can use "d*" commands, for example "db" for breakpointing the function and then "dc" to start or continue execution.
Let's dissasemble the function with "pD" command, it also displays the function variables and arguments as well, note also the xref "call xref from main"
Let's take a look to the function arguments, radare detect's this three 64bits registers used on the function.
Actually the function parameter is rsi that contains a testing html to test the href extraction algorithm.
The string structure is quite simple and it's plenty of implemented methods.
With F8 we can step over the code as we were in ollydbg on linux.
Note the rip marker sliding into the code.
We can recognize the aray creations, and the s.index_after() function used to find substrings since a specific position.
If we take a look de dissasembly we sill see quite a few calls to tos3() functions.
Those functions are involved in string initialization, and implements safety checks.
- tos(string, len)
- tos2(byteptr)
- tos3(charptr)
In this case I have a crash in my V code and I want to know what is crashing, just continue the execution with "dc" and see what poits the rip register.
In visual mode "V" we can see previous instructions to figure out the arguments and state.
We've located the crash on the substring operation which is something like "s2 := s1[a..b]" probably one of the arguments of the substring is out of bounds but luckily the V language has safety checks and is a controlled termination:
Switching the basic block view "space" we can see the execution flow, in this case we know the loops and branches because we have the code but this view also we can see the tos3 parameter "href=" which is useful to locate the position on the code.
When it reach the substr, we can see the parameters with "tab" command.
Looking the implementation the radare parameter calculation is quite exact.
Let's check the param values:
so the indexes are from 0x0e to 0x24 which are inside the buffer, lets continue to next iteration,
if we set a breakpoint and check every iteration, on latest iteration before the crash we have the values 0x2c to 0x70 with overflows the buffer and produces a controlled termination of the v compiled process.
More information
- Hacking Tools And Software
- Pentest Tools For Android
- What Are Hacking Tools
- Hacker Tools Online
- Hacker Tools For Ios
- Hacker Tools Apk
- Hacking Apps
- Hacker
- Hacking Tools 2020
- Hack And Tools
- New Hack Tools
- Hack Tools For Ubuntu
- Hacker Tools Mac
- Hack Tools
- Pentest Tools Review
- Tools Used For Hacking
- Wifi Hacker Tools For Windows
- Best Hacking Tools 2020
- Pentest Tools Port Scanner
- Top Pentest Tools
- Best Pentesting Tools 2018
- Pentest Tools Alternative
- Nsa Hacker Tools
- Hacking Tools Github
- Hacking Tools Free Download
- Pentest Tools Alternative
- Pentest Tools Framework
- Hacking Tools Usb
- Pentest Tools Review
- Hacker Tools Linux
- Hacker Hardware Tools
- Hack Tools Mac
- Top Pentest Tools
- Wifi Hacker Tools For Windows
- Hacking Tools For Beginners
- Pentest Tools Apk
- Hacking Tools For Beginners
- How To Hack
- Bluetooth Hacking Tools Kali
- Hacking Tools Usb
- Hack Tools Online
- Hack Tools For Windows
- Hacking Tools Pc
- Hacking Tools Windows
- Hack Apps
- What Are Hacking Tools
- Computer Hacker
- Pentest Tools Find Subdomains
- Hack Tool Apk No Root
- Hacking Tools Windows 10
- Hack Tools For Games
- Tools 4 Hack
- Hack Tools For Ubuntu
- Hacking Tools And Software
- How To Install Pentest Tools In Ubuntu
- Hacks And Tools
- Hacker
- Hacking Tools Mac
- Hacker Tools For Ios
- Hacking Tools
- Pentest Tools List
- New Hack Tools
- Hacking Tools For Beginners
- Hacking Tools Windows 10
- Pentest Box Tools Download
- Hacker Tools Linux
- Hacking Tools Download
- Hacker Tools Linux
- Nsa Hacker Tools
- Hacking Tools For Pc
- Usb Pentest Tools
- Pentest Recon Tools
- Hack Tools Download
- Pentest Recon Tools
- Termux Hacking Tools 2019
- Hacking App
- Pentest Tools Framework
- Pentest Tools For Windows
- Pentest Tools Open Source
- Pentest Tools For Windows
- Hacker Tools 2019
- Nsa Hack Tools Download
- Hack Tools
- Hack Tools
- Hacker Tools 2020
- Hacker Tools Apk Download
- Pentest Tools Subdomain
- How To Hack
- Hacker Tools Apk Download
- Hacker Tools Software
- Underground Hacker Sites
- Hacker Tools Apk
- Hacker Tools Software
- Pentest Tools Linux
- Hack Tools Download
- Nsa Hack Tools Download
- Hack Tools For Windows
- Hacking Tools For Beginners
- Pentest Tools For Mac
- Hacker Techniques Tools And Incident Handling
- Hack Tools Online
- Hacker Hardware Tools
- Hack Rom Tools
- Hacking Tools Download
- Hacker Tools List
- Pentest Tools Alternative
- Growth Hacker Tools
- Hacker Tools Apk
- How To Hack
- Hacking Tools Download
- Hack Tools Online
- Hacker Tools Linux
- Pentest Tools Nmap
- Pentest Tools For Mac
- World No 1 Hacker Software
- Hacker Search Tools
- Termux Hacking Tools 2019
- Hacker Search Tools
- Hack Tool Apk No Root
- Hacker Tools Mac
- Pentest Reporting Tools
- Hacking Tools Name
- Hacker Techniques Tools And Incident Handling
Tidak ada komentar:
Posting Komentar