Busqueda en Google

Motor de busqueda especializado en la Ciudad de Vigo


viernes, 2 de junio de 2023

Vlang Binary Debugging

Why vlang? V is a featured, productive, safe and confortable language highly compatible with c, that generates neat binaries with c-speed, the decompilation also seems quite clear as c code.
https://vlang.io/

After open the binary with radare in debug mode "-d" we proceed to do the binary recursive analysis with "aaaa" the more a's the more deep analys.



The function names are modified when the binary is crafted, if we have a function named hello in a module named main we will have the symbol main__hello, but we can locate them quicly thanks to radare's grep done with "~" token in this case applied to the "afl" command which lists all the symbols.


Being in debug mode we can use "d*" commands, for example "db" for breakpointing the function and then "dc" to start or continue execution.


Let's dissasemble the function with "pD" command, it also displays the function variables and arguments as well, note also the xref "call xref from main"


Let's take a look to the function arguments, radare detect's this three 64bits registers used on the function.


Actually the function parameter is rsi that contains a testing html to test the href extraction algorithm.


The string structure is quite simple and it's plenty of implemented methods.




With F8 we can step over the code as we were in ollydbg on linux.


Note the rip marker sliding into the code.


We can recognize the aray creations, and the s.index_after() function used to find substrings since a specific position.


If we take a look de dissasembly we sill see quite a few calls to tos3() functions.
Those functions are involved in string initialization, and implements safety checks.

  • tos(string, len)
  • tos2(byteptr)
  • tos3(charptr)

In this case I have a crash in my V code and I want to know what is crashing, just continue the execution with "dc" and see what poits the rip register.



In visual mode "V" we can see previous instructions to figure out the arguments and state.


We've located the crash on the substring operation which is something like "s2 := s1[a..b]" probably one of the arguments of the substring is out of bounds but luckily the V language has safety checks and is a controlled termination:



Switching the basic block view "space" we can see the execution flow, in this case we know the loops and branches because we have the code but this view also we can see the tos3 parameter "href=" which is useful to locate the position on the code.



When it reach the substr, we can see the parameters with "tab" command.



Looking the implementation the radare parameter calculation is quite exact.


Let's check the param values:


so the indexes are from 0x0e to 0x24 which are inside the buffer, lets continue to next iteration,
if we set a breakpoint and check every iteration, on latest iteration before the crash we have the values 0x2c to 0x70 with overflows the buffer and produces a controlled termination of the v compiled process.





Related word
  1. Hacking Tools For Pc
  2. Hackers Toolbox
  3. Hack Tools
  4. Blackhat Hacker Tools
  5. Hacker Tools Github
  6. Hacking Tools Name
  7. Hacker Tools Linux
  8. Hacking Tools Hardware
  9. Hacking Tools Free Download
  10. Pentest Reporting Tools
  11. Pentest Tools Website
  12. Hacking Tools Windows
  13. Hacking Tools Software
  14. Hacker Tools 2020
  15. Hacker Tools
  16. Hacker Tools Apk Download
  17. Best Pentesting Tools 2018
  18. Hacking Tools Kit
  19. New Hack Tools
  20. Computer Hacker
  21. Hacker Hardware Tools
  22. Install Pentest Tools Ubuntu
  23. Hack Tools For Games
  24. Pentest Tools Download
  25. Easy Hack Tools
  26. Install Pentest Tools Ubuntu
  27. Hack Tools For Pc
  28. Hacking Tools For Games
  29. Pentest Recon Tools
  30. Hacking Tools
  31. Termux Hacking Tools 2019
  32. Pentest Tools Url Fuzzer
  33. Hacker Tools 2019
  34. Hacker Tools Windows
  35. Pentest Tools Github
  36. Hack Website Online Tool
  37. Hacker Tools For Ios
  38. Hacker Tools Online
  39. Hacking Tools For Beginners
  40. Computer Hacker
  41. Hacking Tools Download
  42. Pentest Tools For Mac
  43. Hack Tools For Windows
  44. Hacking Tools For Windows 7
  45. Hacking Tools 2019
  46. Hacking Tools For Kali Linux
  47. New Hacker Tools
  48. Hackrf Tools
  49. Hack Website Online Tool
  50. Pentest Tools Find Subdomains
  51. Pentest Tools For Windows
  52. Hacking Apps
  53. Hack Tools 2019
  54. Hacker Tools For Ios
  55. Hacking Tools Windows
  56. Hacker Tools
  57. Hacker Tools Github
  58. Hacking Tools For Pc
  59. Nsa Hacker Tools
  60. Hacking Tools
  61. Hacking Tools Usb
  62. Game Hacking
  63. Hack And Tools
  64. Tools For Hacker
  65. Computer Hacker
  66. Hacks And Tools
  67. What Is Hacking Tools
  68. Hacking Tools For Windows Free Download
  69. Hack Tools
  70. Hack Tools For Ubuntu
  71. Underground Hacker Sites
  72. Pentest Tools Free
  73. Pentest Tools Framework
  74. Hacking Tools 2020
  75. Hacking Tools Mac
  76. Pentest Tools Nmap
  77. Pentest Reporting Tools
  78. Black Hat Hacker Tools
  79. Pentest Tools Bluekeep
  80. Hack Tools For Pc
  81. Pentest Tools Review
  82. Pentest Tools Android
  83. Hackers Toolbox
  84. Pentest Tools Url Fuzzer
  85. Pentest Tools Review
  86. Pentest Reporting Tools
  87. Hacking Tools Download
  88. Pentest Tools Download
  89. Ethical Hacker Tools
  90. Hacker Tools Free Download
  91. Hacker Tools For Pc
  92. Black Hat Hacker Tools
  93. Pentest Tools For Android
  94. Nsa Hacker Tools
  95. Hacker
  96. Pentest Tools Port Scanner
  97. Hacking Tools Usb
  98. Hacking Tools For Games
  99. Kik Hack Tools
  100. Pentest Recon Tools
  101. Hacking Tools 2020

No hay comentarios:

Publicar un comentario

Google Map de Vigo

Busqueda en Todovigo

Motor de busqueda especializado en la Ciudad de Vigo