https://vlang.io/
After open the binary with radare in debug mode "-d" we proceed to do the binary recursive analysis with "aaaa" the more a's the more deep analys.
The function names are modified when the binary is crafted, if we have a function named hello in a module named main we will have the symbol main__hello, but we can locate them quicly thanks to radare's grep done with "~" token in this case applied to the "afl" command which lists all the symbols.
Being in debug mode we can use "d*" commands, for example "db" for breakpointing the function and then "dc" to start or continue execution.
Let's dissasemble the function with "pD" command, it also displays the function variables and arguments as well, note also the xref "call xref from main"
Let's take a look to the function arguments, radare detect's this three 64bits registers used on the function.
Actually the function parameter is rsi that contains a testing html to test the href extraction algorithm.
The string structure is quite simple and it's plenty of implemented methods.
With F8 we can step over the code as we were in ollydbg on linux.
Note the rip marker sliding into the code.
We can recognize the aray creations, and the s.index_after() function used to find substrings since a specific position.
If we take a look de dissasembly we sill see quite a few calls to tos3() functions.
Those functions are involved in string initialization, and implements safety checks.
- tos(string, len)
- tos2(byteptr)
- tos3(charptr)
In this case I have a crash in my V code and I want to know what is crashing, just continue the execution with "dc" and see what poits the rip register.
In visual mode "V" we can see previous instructions to figure out the arguments and state.
We've located the crash on the substring operation which is something like "s2 := s1[a..b]" probably one of the arguments of the substring is out of bounds but luckily the V language has safety checks and is a controlled termination:
Switching the basic block view "space" we can see the execution flow, in this case we know the loops and branches because we have the code but this view also we can see the tos3 parameter "href=" which is useful to locate the position on the code.
When it reach the substr, we can see the parameters with "tab" command.
Looking the implementation the radare parameter calculation is quite exact.
Let's check the param values:
so the indexes are from 0x0e to 0x24 which are inside the buffer, lets continue to next iteration,
if we set a breakpoint and check every iteration, on latest iteration before the crash we have the values 0x2c to 0x70 with overflows the buffer and produces a controlled termination of the v compiled process.
Related links
- Hack Tools For Windows
- Hack Tools 2019
- Pentest Reporting Tools
- Pentest Tools Url Fuzzer
- Hacker Tools Free Download
- Hack Tool Apk No Root
- Hack And Tools
- Hacking Tools For Windows Free Download
- Termux Hacking Tools 2019
- Easy Hack Tools
- Pentest Tools Apk
- Pentest Tools Open Source
- Hacker Tools Linux
- Hack Rom Tools
- Hack Tools For Games
- Growth Hacker Tools
- Hacker Tools Windows
- Bluetooth Hacking Tools Kali
- Hacking Tools Name
- Hack Tools
- Hacker Tools Free
- Hacker Tools List
- Ethical Hacker Tools
- Hack Tools
- Pentest Tools Website Vulnerability
- Nsa Hacker Tools
- Hacking Tools 2019
- Hacking Tools For Games
- Tools Used For Hacking
- Hack Tool Apk
- Pentest Tools Nmap
- Hacking Tools For Mac
- Hacker Tools Github
- Hacker Tools
- Tools 4 Hack
- Pentest Tools Find Subdomains
- Hacker
- Pentest Automation Tools
- Hacking Tools For Mac
- Pentest Tools Android
- Hacking Tools For Windows
- Pentest Tools Windows
- Hacker Tools Apk Download
- Hacking Tools For Games
- Hack Tools Github
- Hack Tools For Pc
- Pentest Tools Online
- Hacking Tools Name
- Hack Tools For Games
- Pentest Recon Tools
- Hack App
- Hacking Tools For Windows
- Pentest Recon Tools
- Pentest Tools Nmap
- Hak5 Tools
- Hacker Security Tools
- Hacker Tools Online
- Hacker Tools For Mac
- Hacking Tools Pc
- Hacking Tools And Software
- Hacking Tools Kit
- Hacker Tools For Pc
- Pentest Tools For Android
- Hacker Tools Apk Download
- Pentest Tools Github
- Hacker Tools
- Hacker
- Hacker Tools Github
- Hacker Tool Kit
- Black Hat Hacker Tools
- Pentest Tools Framework
- Usb Pentest Tools
- Hacks And Tools
- Hacker Tools Linux
- Pentest Tools Nmap
- Hacker Tools For Windows
- Pentest Box Tools Download
- Android Hack Tools Github
- Hack And Tools
- Hacker Tools
- Pentest Tools Website Vulnerability
- Hack And Tools
- Pentest Tools Url Fuzzer
- Pentest Tools Download
- How To Hack
- Nsa Hack Tools
- Hack Tools For Ubuntu
- Pentest Tools Nmap
- Pentest Tools Framework
- Hacking Tools Usb
- Hacker Security Tools
- Pentest Tools Android
- Hacking Tools For Beginners
- Hack Tools
- Hack Rom Tools
- Ethical Hacker Tools
- Hacking Tools For Windows Free Download
- Hacking Tools Hardware
- Growth Hacker Tools
- Hack And Tools
- Top Pentest Tools
- Hack Tools Pc
- Pentest Tools Website
- Hacker Tools 2019
- Pentest Box Tools Download
- Hack Tool Apk
- Easy Hack Tools
- Hacking Tools For Mac
- Black Hat Hacker Tools
- Pentest Tools Kali Linux
- Hacker Tools Free
- Hacking Tools Windows 10
- Physical Pentest Tools
- Hack Tools Github
- Hacking Tools For Kali Linux
- What Is Hacking Tools
- Computer Hacker
- Tools 4 Hack
- Pentest Tools Kali Linux
- Pentest Tools Apk
- Bluetooth Hacking Tools Kali
- Pentest Tools Review
- Hacking Tools Download
- Hack Tools Github
- Hack Tools For Mac
- Pentest Tools Alternative
- Pentest Tools Windows
- Hack Tools Download
- Pentest Tools Alternative
- Hacker Tools For Ios
- Hacks And Tools
- Pentest Tools Url Fuzzer
- Hack Tools Online
- Pentest Tools Bluekeep
- Hacking Tools For Windows
- Hacking Tools Github
- Pentest Tools Free
- Pentest Tools For Android
- Pentest Tools Android
- Nsa Hack Tools
- Hacker Tools
- Beginner Hacker Tools
No comments:
Post a Comment