https://vlang.io/
After open the binary with radare in debug mode "-d" we proceed to do the binary recursive analysis with "aaaa" the more a's the more deep analys.
The function names are modified when the binary is crafted, if we have a function named hello in a module named main we will have the symbol main__hello, but we can locate them quicly thanks to radare's grep done with "~" token in this case applied to the "afl" command which lists all the symbols.
Being in debug mode we can use "d*" commands, for example "db" for breakpointing the function and then "dc" to start or continue execution.
Let's dissasemble the function with "pD" command, it also displays the function variables and arguments as well, note also the xref "call xref from main"
Let's take a look to the function arguments, radare detect's this three 64bits registers used on the function.
Actually the function parameter is rsi that contains a testing html to test the href extraction algorithm.
The string structure is quite simple and it's plenty of implemented methods.
With F8 we can step over the code as we were in ollydbg on linux.
Note the rip marker sliding into the code.
We can recognize the aray creations, and the s.index_after() function used to find substrings since a specific position.
If we take a look de dissasembly we sill see quite a few calls to tos3() functions.
Those functions are involved in string initialization, and implements safety checks.
- tos(string, len)
- tos2(byteptr)
- tos3(charptr)
In this case I have a crash in my V code and I want to know what is crashing, just continue the execution with "dc" and see what poits the rip register.
In visual mode "V" we can see previous instructions to figure out the arguments and state.
We've located the crash on the substring operation which is something like "s2 := s1[a..b]" probably one of the arguments of the substring is out of bounds but luckily the V language has safety checks and is a controlled termination:
Switching the basic block view "space" we can see the execution flow, in this case we know the loops and branches because we have the code but this view also we can see the tos3 parameter "href=" which is useful to locate the position on the code.
When it reach the substr, we can see the parameters with "tab" command.
Looking the implementation the radare parameter calculation is quite exact.
Let's check the param values:
so the indexes are from 0x0e to 0x24 which are inside the buffer, lets continue to next iteration,
if we set a breakpoint and check every iteration, on latest iteration before the crash we have the values 0x2c to 0x70 with overflows the buffer and produces a controlled termination of the v compiled process.
Related word
- Hack Tools
- Hack Tools For Pc
- Hack Tools Online
- Hack Rom Tools
- Hack Tools For Windows
- Hacking Tools Hardware
- Black Hat Hacker Tools
- Ethical Hacker Tools
- Hacking Tools 2020
- Pentest Box Tools Download
- Hacker Tools List
- Hack Tool Apk No Root
- Kik Hack Tools
- Hacker Tools Hardware
- Hacking Tools Mac
- Hack Apps
- Hack Tools Online
- Pentest Tools Kali Linux
- Pentest Tools Port Scanner
- Hacker Tools Hardware
- Hack Tools
- Github Hacking Tools
- Hack Tools For Pc
- Pentest Tools
- Hacking Tools For Kali Linux
- Pentest Tools Website
- Hack Tools
- Pentest Tools Nmap
- Hacker Search Tools
- Hack Tools Mac
- Hack Tools Download
- Hack Tools Pc
- Tools For Hacker
- Hacker Search Tools
- Hacking Apps
- Pentest Tools Apk
- Best Hacking Tools 2019
- Pentest Tools Review
- Github Hacking Tools
- Hak5 Tools
- Best Hacking Tools 2019
- Hacker Tools Apk
- Hacking Tools Free Download
- Pentest Tools Website
- Pentest Tools Kali Linux
- Pentest Tools Url Fuzzer
- Hacker Tools 2020
- Pentest Tools Subdomain
- Hacker Tools For Mac
- Hacking Tools 2020
- Hacking Tools And Software
- Hack Rom Tools
- Pentest Tools Framework
- Growth Hacker Tools
- Kik Hack Tools
- How To Make Hacking Tools
- Hacking Tools Name
- Wifi Hacker Tools For Windows
- Hacking Tools Download
- Hacker Tools Hardware
- Blackhat Hacker Tools
- Pentest Tools Alternative
- Free Pentest Tools For Windows
- Hacker Tools Hardware
- Easy Hack Tools
- Hacking App
- Best Hacking Tools 2019
- Hak5 Tools
- Pentest Tools Nmap
- Easy Hack Tools
- Hacking Tools Pc
- Pentest Reporting Tools
- Hacking Tools Windows 10
- Free Pentest Tools For Windows
- Pentest Tools Apk
- Pentest Tools
- Hacking Tools Kit
- Pentest Tools Android
- Hacker Tool Kit
- Hacking Tools Kit
- Hacks And Tools
- Hackers Toolbox
- Hacker Tools Apk Download
- Hacker Tools Github
- Hacking Tools
- Pentest Tools Github
- Best Hacking Tools 2019
- Hacking Tools Software
- Hack Tool Apk No Root
- Hack Tools For Mac
- Hacking Tools Pc
- How To Hack
- Ethical Hacker Tools
- How To Install Pentest Tools In Ubuntu
- Hack Tools Pc
- Hackers Toolbox
- Hacker Tool Kit
- Hack App
- Hacks And Tools
- Wifi Hacker Tools For Windows
- Pentest Tools Tcp Port Scanner
- Hack And Tools
- Hack Website Online Tool
- Hacking Tools
- Pentest Tools Bluekeep
- Kik Hack Tools
- Termux Hacking Tools 2019
- Pentest Tools Linux
- Best Hacking Tools 2020
- Hacking Tools Windows
- Hacker Tools 2019
- Hack Tools Github
- Hacker Tools Mac
- New Hacker Tools
- Hacking Tools Windows 10
- Hacker Tools Hardware
- Blackhat Hacker Tools
- Hacking Tools For Windows 7
- Hack Tools 2019
- Usb Pentest Tools
- What Are Hacking Tools
- Hacking Tools And Software
- Growth Hacker Tools
- Hacks And Tools
- Pentest Tools Android
- Hacker Techniques Tools And Incident Handling
- Hacking Tools Usb
- Hack Tool Apk
- Github Hacking Tools
- Best Hacking Tools 2019
- Hacks And Tools
- Hack Tools For Games
- Pentest Tools Kali Linux
- Hack App
- Free Pentest Tools For Windows
- Hacking Tools Online
- Hacking Tools For Windows Free Download
- Hacking Tools For Windows Free Download
- How To Make Hacking Tools
- Hacker Tools For Pc
- Hack Tools Online
- Hak5 Tools
- Hack Tools
- Hacking Tools Usb
- Hacking Tools Usb
- Growth Hacker Tools
- Hacks And Tools
- Hack Tools Download
- Hacker Tools List
- Pentest Tools For Ubuntu
- Hacking Tools 2019
- Hak5 Tools
- Hacker Tools List
- Pentest Tools Apk
- Easy Hack Tools
- Hack Website Online Tool
- Hacker Tools Linux
- Hack Tools 2019
- Hacker Tools Apk
- Github Hacking Tools
- Hacker
- Hack Tool Apk No Root
- Pentest Tools Framework
- Hacker Tools List
No comments:
Post a Comment