Vlang Binary Debugging
Sunday, August 30, 2020
0
comments
https://vlang.io/
After open the binary with radare in debug mode "-d" we proceed to do the binary recursive analysis with "aaaa" the more a's the more deep analys.
The function names are modified when the binary is crafted, if we have a function named hello in a module named main we will have the symbol main__hello, but we can locate them quicly thanks to radare's grep done with "~" token in this case applied to the "afl" command which lists all the symbols.
Being in debug mode we can use "d*" commands, for example "db" for breakpointing the function and then "dc" to start or continue execution.
Let's dissasemble the function with "pD" command, it also displays the function variables and arguments as well, note also the xref "call xref from main"
Let's take a look to the function arguments, radare detect's this three 64bits registers used on the function.
Actually the function parameter is rsi that contains a testing html to test the href extraction algorithm.
The string structure is quite simple and it's plenty of implemented methods.
With F8 we can step over the code as we were in ollydbg on linux.
Note the rip marker sliding into the code.
We can recognize the aray creations, and the s.index_after() function used to find substrings since a specific position.
If we take a look de dissasembly we sill see quite a few calls to tos3() functions.
Those functions are involved in string initialization, and implements safety checks.
- tos(string, len)
- tos2(byteptr)
- tos3(charptr)
In this case I have a crash in my V code and I want to know what is crashing, just continue the execution with "dc" and see what poits the rip register.
In visual mode "V" we can see previous instructions to figure out the arguments and state.
We've located the crash on the substring operation which is something like "s2 := s1[a..b]" probably one of the arguments of the substring is out of bounds but luckily the V language has safety checks and is a controlled termination:
Switching the basic block view "space" we can see the execution flow, in this case we know the loops and branches because we have the code but this view also we can see the tos3 parameter "href=" which is useful to locate the position on the code.
When it reach the substr, we can see the parameters with "tab" command.
Looking the implementation the radare parameter calculation is quite exact.
Let's check the param values:
so the indexes are from 0x0e to 0x24 which are inside the buffer, lets continue to next iteration,
if we set a breakpoint and check every iteration, on latest iteration before the crash we have the values 0x2c to 0x70 with overflows the buffer and produces a controlled termination of the v compiled process.
Read more
- Hack Tool Apk
- Game Hacking
- Hacker Search Tools
- Best Hacking Tools 2020
- Hacking Tools 2020
- Pentest Box Tools Download
- Pentest Reporting Tools
- Hak5 Tools
- Pentest Tools List
- Hack And Tools
- World No 1 Hacker Software
- Hack And Tools
- Pentest Automation Tools
- Pentest Tools Free
- Pentest Tools Windows
- Pentest Reporting Tools
- Physical Pentest Tools
- Hack Tools For Windows
- Hacker Tools Windows
- Hacking Tools For Windows
- Hacker Tools
- Github Hacking Tools
- Beginner Hacker Tools
- Pentest Tools List
- Pentest Tools Bluekeep
- Hacking Tools For Windows 7
- Pentest Tools
- Hacking Tools For Games
- Tools Used For Hacking
- Hack Apps
- Hackers Toolbox
- Hacks And Tools
- Pentest Tools Github
- Hacker Tools
- Pentest Tools Alternative
- Github Hacking Tools
- Hacking Tools Download
- Hack Tools For Windows
- Nsa Hacker Tools
- Hacking Tools For Pc
- Hack Tool Apk
- Hacker Security Tools
- Pentest Tools For Android
- Tools 4 Hack
- Hack Tools Download
- Growth Hacker Tools
- Pentest Tools Website Vulnerability
- Pentest Recon Tools
- Hacker Tools Hardware
- Hack Tools Github
- Nsa Hacker Tools
- Pentest Tools Download
- Pentest Tools Apk
- Hacking Tools Hardware
- What Is Hacking Tools
- Hack Tool Apk
- How To Make Hacking Tools
- Hack Tools For Mac
- Pentest Tools Download
- Game Hacking
- Hack And Tools
- Hacker Tools Apk Download
- Hacker Tools For Mac
- Hacker Tools For Pc
- Black Hat Hacker Tools
- Pentest Tools Online
- Pentest Tools Alternative
- Hacker Tools Software
- What Are Hacking Tools
- Tools For Hacker
- Hacker Tools
- Hack Tools For Windows
- Pentest Tools Kali Linux
- Best Hacking Tools 2019
- Hacking Tools 2020
- Hacker Tools 2019
- Pentest Tools For Mac
- Hacker Tools For Ios
- Hacking Tools For Mac
- Pentest Tools Url Fuzzer
- Game Hacking
- Hacking Tools For Pc
- Hacking Tools And Software
- Hackrf Tools
- Hack Tools Pc
- Easy Hack Tools
- Hacker Tools 2019
- Hack Tools For Ubuntu
- Pentest Tools Subdomain
- Hacking Tools Windows
- Black Hat Hacker Tools
- Pentest Tools Kali Linux
- Tools For Hacker
- Hacking Tools And Software
- Hack Website Online Tool
- Free Pentest Tools For Windows
- Black Hat Hacker Tools
- Pentest Tools For Android
- Hacking Apps
- Hacking Tools Download
- World No 1 Hacker Software
- What Is Hacking Tools
- Nsa Hack Tools Download
- Hack And Tools
- Pentest Tools Bluekeep
- Hacking Tools Online
- Hak5 Tools
- Hack Tools For Mac
- Hacking Tools Free Download
- Tools Used For Hacking
- Nsa Hack Tools
- Pentest Recon Tools
- Hacking Apps
- Physical Pentest Tools
- Pentest Tools Nmap
- Hacker Security Tools
- Hacker Tools Mac
- Hacker Security Tools
- Hack App
- Hack Tools For Games
- Best Hacking Tools 2019
- Pentest Tools Android
- Pentest Tools Website Vulnerability
- Hacker Tools For Ios
- Hack Tools For Games
- Hacker Tools Linux
- Pentest Tools Kali Linux
- Hacking Tools Pc
- Hacking Tools Github
- Hacking Tools Hardware
- Pentest Tools
- Pentest Tools Review
- Hacker Tools Mac
- Pentest Tools Apk
- Hack Tools Pc
- Hacker Techniques Tools And Incident Handling
- Hacking Tools 2020
- Hack App
- Hacker Tools Free Download
- Hacking Tools For Kali Linux
- Hackers Toolbox
- Hacking Apps
- Black Hat Hacker Tools
- Pentest Tools Apk
- Hacking Tools Windows 10
- Hacker Search Tools
- Hacker Tools Apk Download
- Pentest Automation Tools
- Pentest Tools For Android
- How To Install Pentest Tools In Ubuntu
- Hacking Tools For Windows Free Download
- Pentest Automation Tools
- Pentest Tools Kali Linux
- Pentest Tools Find Subdomains
0 comments:
Post a Comment