Pages

Vlang Binary Debugging

Why vlang? V is a featured, productive, safe and confortable language highly compatible with c, that generates neat binaries with c-speed, the decompilation also seems quite clear as c code.
https://vlang.io/

After open the binary with radare in debug mode "-d" we proceed to do the binary recursive analysis with "aaaa" the more a's the more deep analys.



The function names are modified when the binary is crafted, if we have a function named hello in a module named main we will have the symbol main__hello, but we can locate them quicly thanks to radare's grep done with "~" token in this case applied to the "afl" command which lists all the symbols.


Being in debug mode we can use "d*" commands, for example "db" for breakpointing the function and then "dc" to start or continue execution.


Let's dissasemble the function with "pD" command, it also displays the function variables and arguments as well, note also the xref "call xref from main"


Let's take a look to the function arguments, radare detect's this three 64bits registers used on the function.


Actually the function parameter is rsi that contains a testing html to test the href extraction algorithm.


The string structure is quite simple and it's plenty of implemented methods.




With F8 we can step over the code as we were in ollydbg on linux.


Note the rip marker sliding into the code.


We can recognize the aray creations, and the s.index_after() function used to find substrings since a specific position.


If we take a look de dissasembly we sill see quite a few calls to tos3() functions.
Those functions are involved in string initialization, and implements safety checks.

  • tos(string, len)
  • tos2(byteptr)
  • tos3(charptr)

In this case I have a crash in my V code and I want to know what is crashing, just continue the execution with "dc" and see what poits the rip register.



In visual mode "V" we can see previous instructions to figure out the arguments and state.


We've located the crash on the substring operation which is something like "s2 := s1[a..b]" probably one of the arguments of the substring is out of bounds but luckily the V language has safety checks and is a controlled termination:



Switching the basic block view "space" we can see the execution flow, in this case we know the loops and branches because we have the code but this view also we can see the tos3 parameter "href=" which is useful to locate the position on the code.



When it reach the substr, we can see the parameters with "tab" command.



Looking the implementation the radare parameter calculation is quite exact.


Let's check the param values:


so the indexes are from 0x0e to 0x24 which are inside the buffer, lets continue to next iteration,
if we set a breakpoint and check every iteration, on latest iteration before the crash we have the values 0x2c to 0x70 with overflows the buffer and produces a controlled termination of the v compiled process.





Related links


  1. Hack Tools For Windows
  2. Hack Tools 2019
  3. Pentest Reporting Tools
  4. Pentest Tools Url Fuzzer
  5. Hacker Tools Free Download
  6. Hack Tool Apk No Root
  7. Hack And Tools
  8. Hacking Tools For Windows Free Download
  9. Termux Hacking Tools 2019
  10. Easy Hack Tools
  11. Pentest Tools Apk
  12. Pentest Tools Open Source
  13. Hacker Tools Linux
  14. Hack Rom Tools
  15. Hack Tools For Games
  16. Growth Hacker Tools
  17. Hacker Tools Windows
  18. Bluetooth Hacking Tools Kali
  19. Hacking Tools Name
  20. Hack Tools
  21. Hacker Tools Free
  22. Hacker Tools List
  23. Ethical Hacker Tools
  24. Hack Tools
  25. Pentest Tools Website Vulnerability
  26. Nsa Hacker Tools
  27. Hacking Tools 2019
  28. Hacking Tools For Games
  29. Tools Used For Hacking
  30. Hack Tool Apk
  31. Pentest Tools Nmap
  32. Hacking Tools For Mac
  33. Hacker Tools Github
  34. Hacker Tools
  35. Tools 4 Hack
  36. Pentest Tools Find Subdomains
  37. Hacker
  38. Pentest Automation Tools
  39. Hacking Tools For Mac
  40. Pentest Tools Android
  41. Hacking Tools For Windows
  42. Pentest Tools Windows
  43. Hacker Tools Apk Download
  44. Hacking Tools For Games
  45. Hack Tools Github
  46. Hack Tools For Pc
  47. Pentest Tools Online
  48. Hacking Tools Name
  49. Hack Tools For Games
  50. Pentest Recon Tools
  51. Hack App
  52. Hacking Tools For Windows
  53. Pentest Recon Tools
  54. Pentest Tools Nmap
  55. Hak5 Tools
  56. Hacker Security Tools
  57. Hacker Tools Online
  58. Hacker Tools For Mac
  59. Hacking Tools Pc
  60. Hacking Tools And Software
  61. Hacking Tools Kit
  62. Hacker Tools For Pc
  63. Pentest Tools For Android
  64. Hacker Tools Apk Download
  65. Pentest Tools Github
  66. Hacker Tools
  67. Hacker
  68. Hacker Tools Github
  69. Hacker Tool Kit
  70. Black Hat Hacker Tools
  71. Pentest Tools Framework
  72. Usb Pentest Tools
  73. Hacks And Tools
  74. Hacker Tools Linux
  75. Pentest Tools Nmap
  76. Hacker Tools For Windows
  77. Pentest Box Tools Download
  78. Android Hack Tools Github
  79. Hack And Tools
  80. Hacker Tools
  81. Pentest Tools Website Vulnerability
  82. Hack And Tools
  83. Pentest Tools Url Fuzzer
  84. Pentest Tools Download
  85. How To Hack
  86. Nsa Hack Tools
  87. Hack Tools For Ubuntu
  88. Pentest Tools Nmap
  89. Pentest Tools Framework
  90. Hacking Tools Usb
  91. Hacker Security Tools
  92. Pentest Tools Android
  93. Hacking Tools For Beginners
  94. Hack Tools
  95. Hack Rom Tools
  96. Ethical Hacker Tools
  97. Hacking Tools For Windows Free Download
  98. Hacking Tools Hardware
  99. Growth Hacker Tools
  100. Hack And Tools
  101. Top Pentest Tools
  102. Hack Tools Pc
  103. Pentest Tools Website
  104. Hacker Tools 2019
  105. Pentest Box Tools Download
  106. Hack Tool Apk
  107. Easy Hack Tools
  108. Hacking Tools For Mac
  109. Black Hat Hacker Tools
  110. Pentest Tools Kali Linux
  111. Hacker Tools Free
  112. Hacking Tools Windows 10
  113. Physical Pentest Tools
  114. Hack Tools Github
  115. Hacking Tools For Kali Linux
  116. What Is Hacking Tools
  117. Computer Hacker
  118. Tools 4 Hack
  119. Pentest Tools Kali Linux
  120. Pentest Tools Apk
  121. Bluetooth Hacking Tools Kali
  122. Pentest Tools Review
  123. Hacking Tools Download
  124. Hack Tools Github
  125. Hack Tools For Mac
  126. Pentest Tools Alternative
  127. Pentest Tools Windows
  128. Hack Tools Download
  129. Pentest Tools Alternative
  130. Hacker Tools For Ios
  131. Hacks And Tools
  132. Pentest Tools Url Fuzzer
  133. Hack Tools Online
  134. Pentest Tools Bluekeep
  135. Hacking Tools For Windows
  136. Hacking Tools Github
  137. Pentest Tools Free
  138. Pentest Tools For Android
  139. Pentest Tools Android
  140. Nsa Hack Tools
  141. Hacker Tools
  142. Beginner Hacker Tools

Baju Korporat Muslimah +60103425700

Phasellus facilisis convallis metus, ut imperdiet augue auctor nec. Duis at velit id augue lobortis porta. Sed varius, enim accumsan aliquam tincidunt, tortor urna vulputate quam, eget finibus urna est in augue.

No comments:

Post a Comment