https://vlang.io/
After open the binary with radare in debug mode "-d" we proceed to do the binary recursive analysis with "aaaa" the more a's the more deep analys.
The function names are modified when the binary is crafted, if we have a function named hello in a module named main we will have the symbol main__hello, but we can locate them quicly thanks to radare's grep done with "~" token in this case applied to the "afl" command which lists all the symbols.
Being in debug mode we can use "d*" commands, for example "db" for breakpointing the function and then "dc" to start or continue execution.
Let's dissasemble the function with "pD" command, it also displays the function variables and arguments as well, note also the xref "call xref from main"
Let's take a look to the function arguments, radare detect's this three 64bits registers used on the function.
Actually the function parameter is rsi that contains a testing html to test the href extraction algorithm.
The string structure is quite simple and it's plenty of implemented methods.
With F8 we can step over the code as we were in ollydbg on linux.
Note the rip marker sliding into the code.
We can recognize the aray creations, and the s.index_after() function used to find substrings since a specific position.
If we take a look de dissasembly we sill see quite a few calls to tos3() functions.
Those functions are involved in string initialization, and implements safety checks.
- tos(string, len)
- tos2(byteptr)
- tos3(charptr)
In this case I have a crash in my V code and I want to know what is crashing, just continue the execution with "dc" and see what poits the rip register.
In visual mode "V" we can see previous instructions to figure out the arguments and state.
We've located the crash on the substring operation which is something like "s2 := s1[a..b]" probably one of the arguments of the substring is out of bounds but luckily the V language has safety checks and is a controlled termination:
Switching the basic block view "space" we can see the execution flow, in this case we know the loops and branches because we have the code but this view also we can see the tos3 parameter "href=" which is useful to locate the position on the code.
When it reach the substr, we can see the parameters with "tab" command.
Looking the implementation the radare parameter calculation is quite exact.
Let's check the param values:
so the indexes are from 0x0e to 0x24 which are inside the buffer, lets continue to next iteration,
if we set a breakpoint and check every iteration, on latest iteration before the crash we have the values 0x2c to 0x70 with overflows the buffer and produces a controlled termination of the v compiled process.
Read more
- Hacking Tools Github
- Hacking Tools For Pc
- Hacker Tools For Mac
- Kik Hack Tools
- Best Pentesting Tools 2018
- Pentest Tools Windows
- Best Pentesting Tools 2018
- Pentest Tools Apk
- Pentest Tools Tcp Port Scanner
- Hack Tools For Games
- Hacker Tools Hardware
- Pentest Tools Free
- How To Hack
- Wifi Hacker Tools For Windows
- Hacker Tools Online
- Hack Tools For Windows
- Hack Tools Github
- Install Pentest Tools Ubuntu
- Easy Hack Tools
- Hack Tools Online
- Hack Tools For Pc
- Hacker Tools Github
- Hacker Tools Linux
- How To Make Hacking Tools
- Pentest Tools Android
- Pentest Tools Port Scanner
- Nsa Hacker Tools
- Pentest Tools For Windows
- Termux Hacking Tools 2019
- Pentest Tools Nmap
- Hackrf Tools
- Pentest Reporting Tools
- Pentest Tools Windows
- Hacker Techniques Tools And Incident Handling
- Hack Tools
- Hacker Tools Online
- Pentest Tools For Ubuntu
- Hacker Tools Software
- Hacking Tools 2019
- Blackhat Hacker Tools
- Hacking Tools Kit
- World No 1 Hacker Software
- Ethical Hacker Tools
- Hacking Tools Kit
- Hacking Tools For Mac
- Underground Hacker Sites
- Hacker Tool Kit
- Easy Hack Tools
- Hacking Apps
- How To Hack
- Nsa Hack Tools Download
- Hacker
- Nsa Hacker Tools
- Pentest Tools Free
- Computer Hacker
- Pentest Box Tools Download
- Hacker Tools For Ios
- Hack Tools
- Growth Hacker Tools
- Pentest Box Tools Download
- Github Hacking Tools
- Pentest Tools For Android
- Pentest Tools Bluekeep
- Best Hacking Tools 2019
- Black Hat Hacker Tools
- Hacker Tools 2020
- Beginner Hacker Tools
- New Hack Tools
- Hacker Tools 2020
- Bluetooth Hacking Tools Kali
- Hacking Tools Hardware
- Hacker Techniques Tools And Incident Handling
- Hackrf Tools
- Pentest Tools For Ubuntu
- Pentest Reporting Tools
- Pentest Tools Website
- Tools 4 Hack
- Pentest Tools For Mac
- Hack Tools For Windows
- Pentest Box Tools Download
- Hacking Tools For Games
- Pentest Tools For Android
- Hacker Hardware Tools
- Computer Hacker
- How To Make Hacking Tools
- Underground Hacker Sites
- Hacking Tools For Windows
- Hacker Tools Apk Download
- Pentest Tools Port Scanner
- Hack Tool Apk No Root
- Pentest Recon Tools
- Hacker Tools 2020
- Hak5 Tools
- How To Hack
- Pentest Tools Apk
- Hack Tools Pc
- Hack Tools Download
- Hacking Tools Pc
- Pentest Tools For Android
- Growth Hacker Tools
- Hacking Tools For Beginners
- Hacker Tools Github
- Hacker Tool Kit
- Pentest Tools Find Subdomains
- Tools 4 Hack
- Hack Tools Pc
- Hacking Tools For Mac
- Hacking Tools For Windows 7
- Usb Pentest Tools
- Hack Tools For Ubuntu
- Hacking Tools Free Download
- Pentest Tools Url Fuzzer
- Tools 4 Hack
- Pentest Tools List
- Hack Tools
- Black Hat Hacker Tools
- Hacking Apps
- Hackers Toolbox
- Hacks And Tools
- Tools For Hacker
- Pentest Tools Open Source
- Pentest Tools Framework
- Hack Tool Apk No Root
- Bluetooth Hacking Tools Kali
- Hacking Apps
- Hacker Tools Linux
- Pentest Tools Apk
- Pentest Tools For Mac
- Hack Tools For Windows
- Hacker Security Tools
- Hacker Tools Free Download
- Pentest Tools Alternative
- Hack Tools
- Hack Tools Pc
- Pentest Tools
- Pentest Tools Url Fuzzer
- Hak5 Tools
- Hacker Tools For Ios
- Pentest Reporting Tools
- Hacker Tools List
- Hacker Tools 2019
- Pentest Tools Free
- Pentest Tools Github
- Hacking Tools For Mac
- Pentest Tools Android
- Pentest Tools Nmap
- Pentest Tools Review
- Hack Tool Apk
- Blackhat Hacker Tools
- Pentest Tools Bluekeep
- Hack Tools For Mac
- New Hack Tools
- Blackhat Hacker Tools
- Hacking Tools Usb
- Hack Tools For Games
- Hacker Tools Hardware
- What Is Hacking Tools
- Hacker Tools Apk
- New Hacker Tools
- Tools Used For Hacking
- Pentest Tools Bluekeep
- Easy Hack Tools
- Hacking Tools 2019
- Pentest Tools Tcp Port Scanner
- Github Hacking Tools
- Hack Tools 2019
- Hacking Tools For Windows
- Best Hacking Tools 2020
- Hacking Tools 2019
- Pentest Tools Free
- Pentest Tools Linux
- Hacker Tools Linux
- Hacker Tools 2020
- Pentest Tools Tcp Port Scanner
- Hacker Tools 2019
No comments:
Post a Comment