Vlang Binary Debugging

Why vlang? V is a featured, productive, safe and confortable language highly compatible with c, that generates neat binaries with c-speed, the decompilation also seems quite clear as c code.
https://vlang.io/

After open the binary with radare in debug mode "-d" we proceed to do the binary recursive analysis with "aaaa" the more a's the more deep analys.



The function names are modified when the binary is crafted, if we have a function named hello in a module named main we will have the symbol main__hello, but we can locate them quicly thanks to radare's grep done with "~" token in this case applied to the "afl" command which lists all the symbols.


Being in debug mode we can use "d*" commands, for example "db" for breakpointing the function and then "dc" to start or continue execution.


Let's dissasemble the function with "pD" command, it also displays the function variables and arguments as well, note also the xref "call xref from main"


Let's take a look to the function arguments, radare detect's this three 64bits registers used on the function.


Actually the function parameter is rsi that contains a testing html to test the href extraction algorithm.


The string structure is quite simple and it's plenty of implemented methods.




With F8 we can step over the code as we were in ollydbg on linux.


Note the rip marker sliding into the code.


We can recognize the aray creations, and the s.index_after() function used to find substrings since a specific position.


If we take a look de dissasembly we sill see quite a few calls to tos3() functions.
Those functions are involved in string initialization, and implements safety checks.

  • tos(string, len)
  • tos2(byteptr)
  • tos3(charptr)

In this case I have a crash in my V code and I want to know what is crashing, just continue the execution with "dc" and see what poits the rip register.



In visual mode "V" we can see previous instructions to figure out the arguments and state.


We've located the crash on the substring operation which is something like "s2 := s1[a..b]" probably one of the arguments of the substring is out of bounds but luckily the V language has safety checks and is a controlled termination:



Switching the basic block view "space" we can see the execution flow, in this case we know the loops and branches because we have the code but this view also we can see the tos3 parameter "href=" which is useful to locate the position on the code.



When it reach the substr, we can see the parameters with "tab" command.



Looking the implementation the radare parameter calculation is quite exact.


Let's check the param values:


so the indexes are from 0x0e to 0x24 which are inside the buffer, lets continue to next iteration,
if we set a breakpoint and check every iteration, on latest iteration before the crash we have the values 0x2c to 0x70 with overflows the buffer and produces a controlled termination of the v compiled process.





More information
  1. New Hack Tools
  2. Hacking Tools Usb
  3. Hacking Tools
  4. Hack Tools For Games
  5. Game Hacking
  6. Hacker Tools Mac
  7. Hacker Tools Free Download
  8. Hacking Tools Windows
  9. Hack Tools 2019
  10. Hacker Tools 2019
  11. Hacking Tools Github
  12. Hacking Tools For Windows Free Download
  13. Pentest Tools For Android
  14. Pentest Tools Review
  15. Pentest Tools Apk
  16. Tools For Hacker
  17. Pentest Tools Review
  18. Pentest Tools Windows
  19. Easy Hack Tools
  20. Hacking Apps
  21. Hack Tools For Pc
  22. Pentest Tools For Mac
  23. Hacking Tools For Beginners
  24. Bluetooth Hacking Tools Kali
  25. Easy Hack Tools
  26. Hacker Tools Hardware
  27. Ethical Hacker Tools
  28. Hacker Tools Apk Download
  29. Hacking Tools For Mac
  30. Hacking Tools For Windows 7
  31. Hacking Tools Hardware
  32. Hacking Tools Hardware
  33. Easy Hack Tools
  34. Pentest Tools Port Scanner
  35. Tools 4 Hack
  36. Hacking Tools For Mac
  37. Hacking Tools Windows 10
  38. Best Hacking Tools 2019
  39. Blackhat Hacker Tools
  40. Hacking Tools Download
  41. Nsa Hack Tools Download
  42. Pentest Tools Apk
  43. Kik Hack Tools
  44. Hacking Tools For Windows
  45. Pentest Tools Website Vulnerability
  46. Hack Tools For Mac
  47. Pentest Tools Alternative
  48. Hack Tools
  49. Hack Tools 2019
  50. Hacking Tools For Windows 7
  51. Pentest Recon Tools
  52. Pentest Tools Website
  53. Hack Tool Apk No Root
  54. Tools 4 Hack
  55. Pentest Tools
  56. Hacks And Tools
  57. Hacking Tools For Games
  58. Hacker Tools For Pc
  59. Best Pentesting Tools 2018
  60. Hacking Tools And Software
  61. Hacking Tools
  62. Hacker Tools For Pc
  63. Hack Tools For Pc
  64. Nsa Hack Tools
  65. Beginner Hacker Tools
  66. Hacker Tools Free
  67. Top Pentest Tools
  68. Termux Hacking Tools 2019
  69. Hack Tool Apk No Root
  70. Kik Hack Tools
  71. Hacker Search Tools
  72. Hack Tool Apk No Root
  73. Hacker Tools Windows
  74. Hacker Tools Mac
  75. Pentest Tools Open Source
  76. What Is Hacking Tools
  77. Tools For Hacker
  78. Bluetooth Hacking Tools Kali
  79. New Hack Tools
  80. Best Pentesting Tools 2018
  81. Blackhat Hacker Tools
  82. Beginner Hacker Tools
  83. Github Hacking Tools
  84. Hacking Tools Usb
  85. Pentest Tools List
  86. Hacking Tools For Beginners
  87. Hacking Tools And Software
  88. Hacking Tools For Windows 7
  89. Hacking Tools For Windows
  90. Hack Tools
  91. Hacking Tools Kit
  92. Hacker Tools For Ios
  93. Hacking Tools For Beginners
  94. Hackers Toolbox
  95. Hack Tools For Games

0 comments:

Post a Comment