https://vlang.io/
After open the binary with radare in debug mode "-d" we proceed to do the binary recursive analysis with "aaaa" the more a's the more deep analys.
The function names are modified when the binary is crafted, if we have a function named hello in a module named main we will have the symbol main__hello, but we can locate them quicly thanks to radare's grep done with "~" token in this case applied to the "afl" command which lists all the symbols.
Being in debug mode we can use "d*" commands, for example "db" for breakpointing the function and then "dc" to start or continue execution.
Let's dissasemble the function with "pD" command, it also displays the function variables and arguments as well, note also the xref "call xref from main"
Let's take a look to the function arguments, radare detect's this three 64bits registers used on the function.
Actually the function parameter is rsi that contains a testing html to test the href extraction algorithm.
The string structure is quite simple and it's plenty of implemented methods.
With F8 we can step over the code as we were in ollydbg on linux.
Note the rip marker sliding into the code.
We can recognize the aray creations, and the s.index_after() function used to find substrings since a specific position.
If we take a look de dissasembly we sill see quite a few calls to tos3() functions.
Those functions are involved in string initialization, and implements safety checks.
- tos(string, len)
- tos2(byteptr)
- tos3(charptr)
In this case I have a crash in my V code and I want to know what is crashing, just continue the execution with "dc" and see what poits the rip register.
In visual mode "V" we can see previous instructions to figure out the arguments and state.
We've located the crash on the substring operation which is something like "s2 := s1[a..b]" probably one of the arguments of the substring is out of bounds but luckily the V language has safety checks and is a controlled termination:
Switching the basic block view "space" we can see the execution flow, in this case we know the loops and branches because we have the code but this view also we can see the tos3 parameter "href=" which is useful to locate the position on the code.
When it reach the substr, we can see the parameters with "tab" command.
Looking the implementation the radare parameter calculation is quite exact.
Let's check the param values:
so the indexes are from 0x0e to 0x24 which are inside the buffer, lets continue to next iteration,
if we set a breakpoint and check every iteration, on latest iteration before the crash we have the values 0x2c to 0x70 with overflows the buffer and produces a controlled termination of the v compiled process.
Related links
- Termux Hacking Tools 2019
- Hack Apps
- Tools Used For Hacking
- Hacking Tools Name
- Hack Tool Apk
- Pentest Tools Windows
- Hack Tools Online
- Hacking Tools For Windows Free Download
- New Hacker Tools
- Hack Tools
- Hack Rom Tools
- Hacking Tools Github
- Hack Tools For Ubuntu
- Pentest Tools Subdomain
- Top Pentest Tools
- Physical Pentest Tools
- Hacker Tool Kit
- Easy Hack Tools
- Termux Hacking Tools 2019
- Android Hack Tools Github
- Hacker Tools Free
- Pentest Tools Url Fuzzer
- Hacker Tools Windows
- Hacking Apps
- Hacker Hardware Tools
- Growth Hacker Tools
- Usb Pentest Tools
- Hack Tools
- Hack Tools For Mac
- Underground Hacker Sites
- Hacker Tools Software
- Pentest Tools Windows
- Hacking Tools Mac
- Hack Website Online Tool
- Pentest Tools Alternative
- Hack Rom Tools
- Pentest Tools Windows
- Hacker Tools Online
- Github Hacking Tools
- Hack Tools
- Hacker Tools Apk
- Pentest Tools Review
- Pentest Tools Url Fuzzer
- Ethical Hacker Tools
- Pentest Tools Website
- Hack Tools Pc
- Usb Pentest Tools
- Hacker Tools Online
- Hacker Tool Kit
- Pentest Reporting Tools
- Hacks And Tools
- Beginner Hacker Tools
- Pentest Reporting Tools
- Hacking Tools
- Hacker Techniques Tools And Incident Handling
- What Is Hacking Tools
- Hacking Tools Online
- Hack Tool Apk No Root
- Hacking Tools Windows
- Hack Tools For Windows
- New Hacker Tools
- Tools For Hacker
- Hack Apps
- Pentest Tools Website Vulnerability
- Hacker Security Tools
- Pentest Tools For Windows
- Pentest Tools Tcp Port Scanner
- Hacking Tools Software
- Growth Hacker Tools
- Hacker Tools 2019
- Physical Pentest Tools
- Hack Tools Download
- Game Hacking
- Pentest Tools Website Vulnerability
- Ethical Hacker Tools
- Hacking Tools Software
- Hack App
- Hack Tools For Windows
- Hacking Tools 2020
- Pentest Tools Tcp Port Scanner
- Nsa Hack Tools Download
- Hacking Tools Free Download
- Hack Tools Download
- Hacker Tools List
- Hacking Tools Online
- Hacker Techniques Tools And Incident Handling
- Pentest Tools Website Vulnerability
- Hacking Tools Name
- Bluetooth Hacking Tools Kali
- Hack Tools 2019
- Hacker Tools List
- Bluetooth Hacking Tools Kali
- Hacking Tools Name
- Black Hat Hacker Tools
- Hack And Tools
- Hack Apps
- Computer Hacker
- Hacker Tool Kit
- Ethical Hacker Tools
- Hacking Tools Download
- Pentest Tools Website Vulnerability
- Pentest Tools Online
- Ethical Hacker Tools
- Hacker Tools Free Download
- Hacker Tools Linux
- Hacker Tools For Mac
- Hacker Tools For Pc
- Pentest Tools Url Fuzzer
- Pentest Tools Tcp Port Scanner
- Pentest Tools Tcp Port Scanner
- Hacker Tools Github
- Beginner Hacker Tools
- Pentest Tools Windows
- Hacking Tools For Mac
- Pentest Tools
- Hacking Tools Kit
- Best Hacking Tools 2020
- Pentest Tools For Ubuntu
- Hacker Tools Windows
- Hack Tools Online
- Hacking Tools For Games
- Game Hacking
- Hacker Tools For Ios
- Hacker Tools Linux
- Pentest Reporting Tools
- Nsa Hack Tools
- Tools For Hacker
- Hacking Tools Software
- Hacking Tools For Windows
- Physical Pentest Tools
- Hacker Techniques Tools And Incident Handling
- Best Hacking Tools 2019
- Hacker Tools Free Download
- Hacker Tools Free Download
- Hack App
- Hacker Tools Free Download
- Hacker Tools For Pc
- Hacking Tools Mac
- Pentest Tools For Android
- Free Pentest Tools For Windows
- How To Install Pentest Tools In Ubuntu
- Hack Tools For Mac
- Hacking Tools Online
- Hacker Search Tools
- Hack Tools For Pc
- Best Hacking Tools 2019
- World No 1 Hacker Software
- Ethical Hacker Tools
- Nsa Hacker Tools