Vlang Binary Debugging
Posted by iNoticiero
on viernes, 26 de mayo de 2023
0
https://vlang.io/
After open the binary with radare in debug mode "-d" we proceed to do the binary recursive analysis with "aaaa" the more a's the more deep analys.
The function names are modified when the binary is crafted, if we have a function named hello in a module named main we will have the symbol main__hello, but we can locate them quicly thanks to radare's grep done with "~" token in this case applied to the "afl" command which lists all the symbols.
Being in debug mode we can use "d*" commands, for example "db" for breakpointing the function and then "dc" to start or continue execution.
Let's dissasemble the function with "pD" command, it also displays the function variables and arguments as well, note also the xref "call xref from main"
Let's take a look to the function arguments, radare detect's this three 64bits registers used on the function.
Actually the function parameter is rsi that contains a testing html to test the href extraction algorithm.
The string structure is quite simple and it's plenty of implemented methods.
With F8 we can step over the code as we were in ollydbg on linux.
Note the rip marker sliding into the code.
We can recognize the aray creations, and the s.index_after() function used to find substrings since a specific position.
If we take a look de dissasembly we sill see quite a few calls to tos3() functions.
Those functions are involved in string initialization, and implements safety checks.
- tos(string, len)
- tos2(byteptr)
- tos3(charptr)
In this case I have a crash in my V code and I want to know what is crashing, just continue the execution with "dc" and see what poits the rip register.
In visual mode "V" we can see previous instructions to figure out the arguments and state.
We've located the crash on the substring operation which is something like "s2 := s1[a..b]" probably one of the arguments of the substring is out of bounds but luckily the V language has safety checks and is a controlled termination:
Switching the basic block view "space" we can see the execution flow, in this case we know the loops and branches because we have the code but this view also we can see the tos3 parameter "href=" which is useful to locate the position on the code.
When it reach the substr, we can see the parameters with "tab" command.
Looking the implementation the radare parameter calculation is quite exact.
Let's check the param values:
so the indexes are from 0x0e to 0x24 which are inside the buffer, lets continue to next iteration,
if we set a breakpoint and check every iteration, on latest iteration before the crash we have the values 0x2c to 0x70 with overflows the buffer and produces a controlled termination of the v compiled process.
More articles
- Pentest Tools For Mac
- Pentest Recon Tools
- How To Install Pentest Tools In Ubuntu
- Hacker Tools Apk
- Hack Tool Apk No Root
- Hacking Tools For Mac
- Hacker Tools Hardware
- Physical Pentest Tools
- Hacker Tools Apk
- Pentest Tools Open Source
- Pentest Tools Website Vulnerability
- Hacking Tools
- Pentest Tools
- Best Pentesting Tools 2018
- Hack Tools 2019
- Pentest Tools Framework
- Physical Pentest Tools
- Pentest Tools Open Source
- Hack Tools For Mac
- Underground Hacker Sites
- Bluetooth Hacking Tools Kali
- Pentest Tools For Mac
- Hack Tools Download
- Tools Used For Hacking
- New Hacker Tools
- Hacker Tools For Ios
- Hacker Tools Mac
- Hacker Hardware Tools
- Hacking Tools Hardware
- How To Make Hacking Tools
- Underground Hacker Sites
- Hacker Tools Apk
- Pentest Tools Online
- Pentest Tools Find Subdomains
- Hacking Tools Kit
- Pentest Tools Download
- Hacker Tools 2019
- Android Hack Tools Github
- Hack Tools
- Pentest Tools Kali Linux
- Github Hacking Tools
- Pentest Tools Linux
- Hacker Search Tools
- Hacking Tools For Windows
- Best Hacking Tools 2019
- Hack Tools For Windows
- Pentest Tools For Android
- Pentest Tools Kali Linux
- Hacker Tools Free
- Hacker Security Tools
- Hacking Tools
- Hacker Tool Kit
- Hak5 Tools
- Hacker Security Tools
- Pentest Tools Free
- Hacker Tools Apk Download
- Hack Tool Apk
- Hacker Security Tools
- Hacker Tools List
- Github Hacking Tools
- Tools Used For Hacking
- Tools Used For Hacking
- Hacker Tools Mac
- Wifi Hacker Tools For Windows
- Pentest Tools Windows
- Tools For Hacker
- Hack Tools Mac
- Hack Apps
- Nsa Hacker Tools
- Hacking Apps
- Hacking Tools 2020
- Hacker
- Hacking Tools Windows 10
- Best Pentesting Tools 2018
- Hacker Tools Apk
- Hacker Search Tools
- What Is Hacking Tools
- Nsa Hack Tools Download
- Pentest Tools Alternative
- Hacks And Tools
- Hack Website Online Tool
- Tools For Hacker
- Hacking Tools Github
- Game Hacking
- Pentest Tools Github
- Tools Used For Hacking
- Pentest Tools Kali Linux
- Best Pentesting Tools 2018
- Hacker
- Hack Tools Download
- Hacking Tools Windows
- Hack Website Online Tool
- Nsa Hack Tools Download
- Pentest Tools For Mac
- Bluetooth Hacking Tools Kali
- Free Pentest Tools For Windows
- Install Pentest Tools Ubuntu
- Free Pentest Tools For Windows
- Termux Hacking Tools 2019
- Pentest Reporting Tools
- Pentest Tools Online
- Pentest Tools Review
- Hak5 Tools
- Tools Used For Hacking
- Pentest Tools For Ubuntu
- Hack Tool Apk No Root
- Pentest Tools Url Fuzzer
- Free Pentest Tools For Windows
- Hack Tools 2019
- Hacker Search Tools
- Pentest Automation Tools
- Hacking Tools Online
- Hacker Hardware Tools
- Hacker Tools Apk Download
- Hacker Tools Software
- Hacker Tools For Pc
- Blackhat Hacker Tools
- Pentest Tools Android
- Pentest Tools Framework
- Hacker Tools 2019
- Pentest Tools For Mac
- Pentest Tools Android
- Hack Website Online Tool
- Hacker Tools For Ios
- Hack Apps
- Pentest Tools Windows
- Game Hacking
- Hacking Tools Mac
- Underground Hacker Sites
- Hacker Tools Github
- Pentest Tools Framework
- Hacker Search Tools
- Hacker Tools Apk Download
- Hack App
- Hacking Tools Usb
- Pentest Tools Find Subdomains
- Pentest Tools Free
- Hack Rom Tools
- Android Hack Tools Github
- Hacking Tools 2020
- Pentest Tools Framework
- Hacking Tools Hardware
- Beginner Hacker Tools
- Hacker Search Tools
- Usb Pentest Tools
- Blackhat Hacker Tools
- Hacker Tool Kit
- Hacking App
- Hack Tools For Ubuntu
- Pentest Tools Bluekeep
- Easy Hack Tools
- Pentest Tools Alternative
- Hack Tools For Windows
- Pentest Tools Free
- Hacker Hardware Tools
- Hacking Apps
- Pentest Tools Alternative
- Hak5 Tools
- Easy Hack Tools
- Hacker Tools Apk
- Hacker Tools Mac
- What Is Hacking Tools
- Hacking Tools Online
- Hacker Tools
- Underground Hacker Sites
- Hack Tools
- Hacking Tools Software
- How To Hack
- Pentest Tools
Tagged as:
About the Author
Write admin description here..
Get Updates
Subscribe to our e-mail newsletter to receive updates.
Share This Post
Related posts
0 comentarios:
Publicar un comentario