Saturday, 29 August 2020

Vlang Binary Debugging

Why vlang? V is a featured, productive, safe and confortable language highly compatible with c, that generates neat binaries with c-speed, the decompilation also seems quite clear as c code.
https://vlang.io/

After open the binary with radare in debug mode "-d" we proceed to do the binary recursive analysis with "aaaa" the more a's the more deep analys.



The function names are modified when the binary is crafted, if we have a function named hello in a module named main we will have the symbol main__hello, but we can locate them quicly thanks to radare's grep done with "~" token in this case applied to the "afl" command which lists all the symbols.


Being in debug mode we can use "d*" commands, for example "db" for breakpointing the function and then "dc" to start or continue execution.


Let's dissasemble the function with "pD" command, it also displays the function variables and arguments as well, note also the xref "call xref from main"


Let's take a look to the function arguments, radare detect's this three 64bits registers used on the function.


Actually the function parameter is rsi that contains a testing html to test the href extraction algorithm.


The string structure is quite simple and it's plenty of implemented methods.




With F8 we can step over the code as we were in ollydbg on linux.


Note the rip marker sliding into the code.


We can recognize the aray creations, and the s.index_after() function used to find substrings since a specific position.


If we take a look de dissasembly we sill see quite a few calls to tos3() functions.
Those functions are involved in string initialization, and implements safety checks.

  • tos(string, len)
  • tos2(byteptr)
  • tos3(charptr)

In this case I have a crash in my V code and I want to know what is crashing, just continue the execution with "dc" and see what poits the rip register.



In visual mode "V" we can see previous instructions to figure out the arguments and state.


We've located the crash on the substring operation which is something like "s2 := s1[a..b]" probably one of the arguments of the substring is out of bounds but luckily the V language has safety checks and is a controlled termination:



Switching the basic block view "space" we can see the execution flow, in this case we know the loops and branches because we have the code but this view also we can see the tos3 parameter "href=" which is useful to locate the position on the code.



When it reach the substr, we can see the parameters with "tab" command.



Looking the implementation the radare parameter calculation is quite exact.


Let's check the param values:


so the indexes are from 0x0e to 0x24 which are inside the buffer, lets continue to next iteration,
if we set a breakpoint and check every iteration, on latest iteration before the crash we have the values 0x2c to 0x70 with overflows the buffer and produces a controlled termination of the v compiled process.





Related news
  1. Hacker Tools Hardware
  2. Hack Tools For Pc
  3. Hacker Tools For Ios
  4. Pentest Tools Tcp Port Scanner
  5. Hacker Security Tools
  6. Android Hack Tools Github
  7. Hacker Tools For Mac
  8. Pentest Box Tools Download
  9. Hacking Tools Software
  10. Hacker Tools Free Download
  11. Hacker Tools For Pc
  12. Nsa Hacker Tools
  13. Hacker Tools For Ios
  14. Pentest Tools For Android
  15. Hackrf Tools
  16. Top Pentest Tools
  17. Hacking Tools Kit
  18. Bluetooth Hacking Tools Kali
  19. Hackrf Tools
  20. Android Hack Tools Github
  21. Pentest Tools Website
  22. Hacking Tools Online
  23. Hacker Tools Mac
  24. Usb Pentest Tools
  25. Hacking Tools Download
  26. Hacker Hardware Tools
  27. Pentest Tools Nmap
  28. New Hack Tools
  29. Hacker Tools For Windows
  30. Kik Hack Tools
  31. Termux Hacking Tools 2019
  32. Pentest Tools Linux
  33. Pentest Tools For Android
  34. How To Install Pentest Tools In Ubuntu
  35. What Are Hacking Tools
  36. Pentest Tools Android
  37. Hacker Tools
  38. Pentest Tools Nmap
  39. Physical Pentest Tools
  40. Pentest Tools Windows
  41. Install Pentest Tools Ubuntu
  42. Free Pentest Tools For Windows
  43. Hack Website Online Tool
  44. Hack Tools For Games
  45. What Are Hacking Tools
  46. Hacking Tools 2019
  47. Nsa Hack Tools Download
  48. Hacking Tools For Beginners
  49. Hack Tools Online
  50. Pentest Tools Alternative
  51. Hack Tool Apk No Root
  52. Hack Tools For Ubuntu
  53. Hackers Toolbox
  54. Hack Tools
  55. Hacker Hardware Tools
  56. Pentest Tools For Android
  57. Pentest Tools Github
  58. Hacker Tools Apk Download
  59. Hacking Tools 2019
  60. Top Pentest Tools
  61. Hacking Tools 2020
  62. Hacker Tools For Windows

No comments:

Post a Comment