Binary Exploit Resources I Recently Trying to Learn

1.2.1. picoCTF

1.2.2. exploit education

2.1.1. pscan

2.1.2. rats

2.1.3. splint

2.1.4. flawfinder

2.2.1. gdb

2.3.1. radare2

1. iaito
   

2.3.2. hopper(non-free)

3.1.1. to show assembly in the source code window in gud, M-x gdb-display-disassembly-buffer

3.1.2. links

1. https://microcorruption.com/
   

3.2.1. simple tools

1. hexdump
   
2. strings
   

   all printable letters
   

3. objdump
   

   disassembler
   

4. strace/ltrace
   

   trace sys/lib call
   

3.2.2. 0x0A: deal with numbers

1. endian?
   

   from Wikipedia
   
   x86 is little endian
   

2. tools
   
   1. python
      

      >>> int('111', 2)
      7
      >>> hex(123)
      '0x7b'
      >>> import struct
      # https://docs.python.org/3.10/library/struct.html#format-characters
      >>> struct.pack("<I", 0x61626364) # little endian
      b'dcba'
      >>> struct.pack(">I", 0x61626364) # big endian
      b'abcd'
      

   2. iex
      

      iex(1)> <<0x61626364::32>>
      "abcd"
      iex(2)> Base.decode16("61626364")
      {:ok, "abcd"}