https://vlang.io/
After open the binary with radare in debug mode "-d" we proceed to do the binary recursive analysis with "aaaa" the more a's the more deep analys.
The function names are modified when the binary is crafted, if we have a function named hello in a module named main we will have the symbol main__hello, but we can locate them quicly thanks to radare's grep done with "~" token in this case applied to the "afl" command which lists all the symbols.
Being in debug mode we can use "d*" commands, for example "db" for breakpointing the function and then "dc" to start or continue execution.
Let's dissasemble the function with "pD" command, it also displays the function variables and arguments as well, note also the xref "call xref from main"
Let's take a look to the function arguments, radare detect's this three 64bits registers used on the function.
Actually the function parameter is rsi that contains a testing html to test the href extraction algorithm.
The string structure is quite simple and it's plenty of implemented methods.
With F8 we can step over the code as we were in ollydbg on linux.
Note the rip marker sliding into the code.
We can recognize the aray creations, and the s.index_after() function used to find substrings since a specific position.
If we take a look de dissasembly we sill see quite a few calls to tos3() functions.
Those functions are involved in string initialization, and implements safety checks.
- tos(string, len)
- tos2(byteptr)
- tos3(charptr)
In this case I have a crash in my V code and I want to know what is crashing, just continue the execution with "dc" and see what poits the rip register.
In visual mode "V" we can see previous instructions to figure out the arguments and state.
We've located the crash on the substring operation which is something like "s2 := s1[a..b]" probably one of the arguments of the substring is out of bounds but luckily the V language has safety checks and is a controlled termination:
Switching the basic block view "space" we can see the execution flow, in this case we know the loops and branches because we have the code but this view also we can see the tos3 parameter "href=" which is useful to locate the position on the code.
When it reach the substr, we can see the parameters with "tab" command.
Looking the implementation the radare parameter calculation is quite exact.
Let's check the param values:
so the indexes are from 0x0e to 0x24 which are inside the buffer, lets continue to next iteration,
if we set a breakpoint and check every iteration, on latest iteration before the crash we have the values 0x2c to 0x70 with overflows the buffer and produces a controlled termination of the v compiled process.
Related articles
- Pentest Tools Review
- Pentest Tools Alternative
- Blackhat Hacker Tools
- Nsa Hack Tools Download
- Hack Tool Apk No Root
- Hacking Tools Hardware
- Hack Tool Apk No Root
- Computer Hacker
- Pentest Tools Website Vulnerability
- Hacking Tools For Windows Free Download
- Hacking Tools Software
- Hacker Tools Software
- Hacking Tools Mac
- Hack Rom Tools
- Pentest Tools Website
- Hacker Tools Free Download
- Growth Hacker Tools
- Pentest Tools Kali Linux
- Hacker Tools
- Hacking Tools For Games
- Best Hacking Tools 2020
- Hacker Tools Online
- Hacking Tools Usb
- Hacker Tools Free
- Hacker Tools Windows
- Hacker Tools Apk
- Pentest Tools Apk
- Termux Hacking Tools 2019
- Hacking Tools For Games
- Hack Tools Online
- Pentest Tools Website
- Pentest Tools For Mac
- Hack Tools Github
- How To Make Hacking Tools
- Hack Tools
- Hacker Tools Apk
- Pentest Reporting Tools
- Hacker Tools For Windows
- Hacking Tools For Games
- Hack Apps
- Hack Tools For Games
- Pentest Tools Bluekeep
- Github Hacking Tools
- Hacker Tools Windows
- Pentest Tools Alternative
- Hacker Tool Kit
- Hack Tools For Windows
- Install Pentest Tools Ubuntu
- Hack Tools Online
- Pentest Tools Port Scanner
- Hacker Tools For Pc
- Top Pentest Tools
- Nsa Hack Tools
- Hacker Tools For Pc
- Hacking Tools Hardware
- Hack Tools Github
- Hack Tool Apk
- Hacker Tool Kit
- Pentest Recon Tools
- Hacking Tools For Windows 7
- Pentest Tools Open Source
- Game Hacking
- Pentest Recon Tools
- Hacking Tools Hardware
- Hack Tools For Games
- How To Install Pentest Tools In Ubuntu
- Pentest Tools Free
- Pentest Tools Online
- Top Pentest Tools
- Hacker Tools Github
- Hacker
- Hacker Tool Kit
- Hacking Tools Download
- Hacker Tools For Pc
- Termux Hacking Tools 2019
- Best Hacking Tools 2020
- Pentest Tools Url Fuzzer
- Tools For Hacker
- Physical Pentest Tools
- Game Hacking
- Hacking Tools Software
- Hacking Tools Pc
- Pentest Tools Tcp Port Scanner
- Hak5 Tools
- Pentest Tools Nmap
- Bluetooth Hacking Tools Kali
- Hacking App
- Hackrf Tools
- Hacker Tools Apk Download
- Pentest Tools Website Vulnerability
- Pentest Tools Windows
- Hack Tool Apk No Root
- Pentest Tools Tcp Port Scanner
- Hacking Tools Free Download
- Hack And Tools
- Hack App
- Hacker Search Tools
- Hacker Tools Linux
- Hacker
- Tools For Hacker
- Hacking Tools For Kali Linux
- Nsa Hack Tools
- Hackrf Tools
- Hack Tools For Games
- Hack Tools For Games
- Hacking Tools And Software
- Pentest Tools Online
- Pentest Tools Android
- Growth Hacker Tools
- Hacking Tools For Windows Free Download
No comments:
Post a Comment