Golang binaries are a bit hard to analyze but there are some tricks to locate the things and view what is doing the code.
Is possible to list all the go files compiled in the binary even in an striped binaries, in this case we have only one file gohello.go this is a good clue to guess what is doing the program.
On stripped binaries the runtime functions are not resolved so is more difficult to locate the user algorithms:
If we start from the entry point, we will found this mess:
The golang string initialization are encoded and is not displayed on the strings window.
How to locate main? if its not stripped just bp on [package name].main for example bp main.main, (you can locate the package-name searching strings with ".main")
And here is our main.main:
The code is:
So in a stripped binary we cant find the string "hello world" neither the initialization 0x1337 nor the comparator 0x1337, all this is obfuscated.
The initialization sequence is:
The procedure for locating main.main in stripped binaries is:
1. Click on the entry point and locate the runtime.mainPC pointer:
2. click on runtime.main function (LAB_0042B030):
3. locate the main.main call after the zero ifs:
4. click on it and here is the main:
The runtime is not obvious for example the fmt.Scanf() call perform several internal calls until reach the syscall, and in a stripped binary there are no function names.
In order to identify the functions one option is compile another binary with symbols and make function fingerprinting.
In Ghidra we have the script golang_renamer.py which is very useful:
After applying this plugin the main looks like more clear:
This script is an example of function fingerprinting, in this case all the opcodes are included on the crc hashing:
# This script fingerprints the functions
#@author: sha0coder
#@category fingerprinting
print "Fingerprinting..."
import zlib
# loop through program functions
function = getFirstFunction()
while function is not None:
name = str(function.getName())
entry = function.getEntryPoint()
body = function.getBody()
addresses = body.getAddresses(True)
if not addresses.hasNext():
# empty function
continue
ins = getInstructionAt(body.getMinAddress())
opcodes = ''
while ins and ins.getMinAddress() <= body.getMaxAddress():
for b in ins.bytes:
opcodes += chr(b & 0xff)
ins = getInstructionAfter(ins)
crchash = zlib.crc32(opcodes) & 0xffffffff
print name, hex(crchash)
function = getFunctionAfter(function)
Related posts
- Bluetooth Hacking Tools Kali
- Top Pentest Tools
- Best Pentesting Tools 2018
- Pentest Tools For Android
- Nsa Hack Tools Download
- Hacker Search Tools
- Best Hacking Tools 2019
- Best Pentesting Tools 2018
- Hacking Tools Hardware
- Pentest Tools Tcp Port Scanner
- Hacking Tools For Windows
- Hack Tools 2019
- Hacker Tools Software
- Hacker Tools
- Best Pentesting Tools 2018
- Hacker Tools
- Hack App
- World No 1 Hacker Software
- Hack Tools Mac
- Pentest Tools List
- Hack Rom Tools
- Hacking Tools Online
- Ethical Hacker Tools
- Wifi Hacker Tools For Windows
- Hackrf Tools
- Hacker Tools Windows
- Hacking Tools And Software
- Hack Tool Apk No Root
- Hack Tools Online
- Hack Rom Tools
- Github Hacking Tools
- Pentest Recon Tools
- Hacking Tools Mac
- Hacking Tools 2020
- Hack Rom Tools
- World No 1 Hacker Software
- Pentest Tools Apk
- Hacking Tools 2020
- Hacker Search Tools
- Hacker Techniques Tools And Incident Handling
- Ethical Hacker Tools
- Pentest Tools For Windows
- Hackrf Tools
- Hacker Tools For Ios
- Bluetooth Hacking Tools Kali
- Pentest Tools Port Scanner
- Hacking Tools Github
- Pentest Tools Alternative
- Hacking Tools For Mac
- Tools For Hacker
- Hacker Search Tools
- Tools For Hacker
- Hacking Tools Free Download
- Game Hacking
- Hacking Tools For Beginners
- Hack Tools
- Wifi Hacker Tools For Windows
- Hacker Tools For Pc
- Github Hacking Tools
- Pentest Tools Online
- Hack Apps
- Hack Tool Apk
- Hacking Tools For Pc
- How To Install Pentest Tools In Ubuntu
- Hacking Tools 2020
- Termux Hacking Tools 2019
- Best Hacking Tools 2020
- Pentest Automation Tools
- Computer Hacker
- Tools 4 Hack
- Hacking Tools For Windows 7
- Hack Tools
- How To Make Hacking Tools
- Pentest Tools Kali Linux
- Hacker Tools Hardware
- Hack Tools Mac
- Nsa Hacker Tools
- What Are Hacking Tools
- Pentest Tools Port Scanner
- Hack Tools Github
- Pentest Recon Tools
- Hack Tools For Games
- Hack Rom Tools
- Install Pentest Tools Ubuntu
- Pentest Recon Tools
- Hacking Tools Usb
- Hacking Tools For Windows
- Hacking Tools Github
- Nsa Hack Tools Download
- Hacking Tools Free Download
- Android Hack Tools Github
- Hacker Techniques Tools And Incident Handling
- Pentest Tools Download
- Pentest Box Tools Download
- Hacker Tools Free Download
- Hacking Tools
- What Are Hacking Tools
- Hack Tools Download
- Pentest Tools For Mac
- Free Pentest Tools For Windows
- Hacking App
- Hacking Tools Usb
- Hacking Tools For Pc
- Hacker Hardware Tools
- Best Hacking Tools 2019
- Hacker Tools For Mac
- Pentest Tools Tcp Port Scanner
- Hacking Tools Windows
- Hacker Tools Hardware
- Hacking Tools Mac
- Hacker Tools Hardware
- Pentest Tools Online
- Pentest Tools Find Subdomains
- Growth Hacker Tools
- Hacking Tools Download
- Hack Tools For Games
- Hacker Tools 2020
- Pentest Tools Open Source
- Hacker Tools 2019
- Pentest Tools For Android
- Pentest Tools Alternative
- Pentest Tools Windows
- Pentest Tools Website Vulnerability
- Computer Hacker
- Nsa Hack Tools
- Pentest Recon Tools
- Pentest Automation Tools
- Hacking Tools For Mac
- How To Install Pentest Tools In Ubuntu
- Hacking Tools Github
- Pentest Tools For Mac
- Hacker Tools For Windows
- Best Hacking Tools 2019
- Pentest Tools Download
- Hack Apps
- Hack Tools Pc
- Hacking Tools Kit
- Github Hacking Tools
- Pentest Tools Port Scanner
- New Hacker Tools
- Hack And Tools
- Hack Tools Online
- Hackers Toolbox
- World No 1 Hacker Software
- Tools 4 Hack
- Hacker Tools Free
- Physical Pentest Tools
- Hack Tools
- Termux Hacking Tools 2019
- Pentest Tools Android
- Hack Apps
- How To Hack
- Hacker Tools Windows
- Hacking Tools For Windows Free Download
- Github Hacking Tools
- Nsa Hack Tools Download
- Hackers Toolbox
- Pentest Tools Framework
- Hacker Tools Free Download
- Pentest Tools Windows
- Computer Hacker
- Hacker Tools Software
- Android Hack Tools Github
- Hacking Tools For Games
- Hack Tools For Pc
- Hak5 Tools
- Pentest Tools Github
- Hackers Toolbox
- Game Hacking
- How To Make Hacking Tools
- Hacker Tools Hardware
- Hacking Tools Hardware
- Hacker Tools Free
- Wifi Hacker Tools For Windows
No hay comentarios:
Publicar un comentario
Nota: solo los miembros de este blog pueden publicar comentarios.