Golang binaries are a bit hard to analyze but there are some tricks to locate the things and view what is doing the code.
Is possible to list all the go files compiled in the binary even in an striped binaries, in this case we have only one file gohello.go this is a good clue to guess what is doing the program.
On stripped binaries the runtime functions are not resolved so is more difficult to locate the user algorithms:
If we start from the entry point, we will found this mess:
The golang string initialization are encoded and is not displayed on the strings window.
How to locate main? if its not stripped just bp on [package name].main for example bp main.main, (you can locate the package-name searching strings with ".main")
And here is our main.main:
The code is:
So in a stripped binary we cant find the string "hello world" neither the initialization 0x1337 nor the comparator 0x1337, all this is obfuscated.
The initialization sequence is:
The procedure for locating main.main in stripped binaries is:
1. Click on the entry point and locate the runtime.mainPC pointer:
2. click on runtime.main function (LAB_0042B030):
3. locate the main.main call after the zero ifs:
4. click on it and here is the main:
The runtime is not obvious for example the fmt.Scanf() call perform several internal calls until reach the syscall, and in a stripped binary there are no function names.
In order to identify the functions one option is compile another binary with symbols and make function fingerprinting.
In Ghidra we have the script golang_renamer.py which is very useful:
After applying this plugin the main looks like more clear:
This script is an example of function fingerprinting, in this case all the opcodes are included on the crc hashing:
# This script fingerprints the functions
#@author: sha0coder
#@category fingerprinting
print "Fingerprinting..."
import zlib
# loop through program functions
function = getFirstFunction()
while function is not None:
name = str(function.getName())
entry = function.getEntryPoint()
body = function.getBody()
addresses = body.getAddresses(True)
if not addresses.hasNext():
# empty function
continue
ins = getInstructionAt(body.getMinAddress())
opcodes = ''
while ins and ins.getMinAddress() <= body.getMaxAddress():
for b in ins.bytes:
opcodes += chr(b & 0xff)
ins = getInstructionAfter(ins)
crchash = zlib.crc32(opcodes) & 0xffffffff
print name, hex(crchash)
function = getFunctionAfter(function)
Related articles
- Hack Tools Download
- Hack Tool Apk
- Hacker Tools For Pc
- Free Pentest Tools For Windows
- Pentest Recon Tools
- Tools 4 Hack
- Hack Tool Apk
- How To Make Hacking Tools
- Tools 4 Hack
- New Hacker Tools
- Hacker Tools Apk
- Hackers Toolbox
- Hack And Tools
- Hacker Tools Mac
- Hacking Tools For Pc
- Hacking Tools Software
- Android Hack Tools Github
- Pentest Tools Review
- Pentest Tools For Ubuntu
- What Are Hacking Tools
- Pentest Tools Free
- What Are Hacking Tools
- Usb Pentest Tools
- Pentest Tools Website Vulnerability
- Hacker Tools Free
- Hacking App
- Pentest Tools Kali Linux
- Hack Tools
- Hacker Tools
- Hacking Tools Mac
- Best Hacking Tools 2020
- Pentest Box Tools Download
- Hack Tools
- Hacking Tools 2019
- Pentest Tools Framework
- Hackrf Tools
- Pentest Recon Tools
- Best Pentesting Tools 2018
- Pentest Tools For Ubuntu
- Pentest Tools Bluekeep
- Hacking Tools For Windows 7
- Pentest Tools
- Pentest Recon Tools
- Pentest Tools For Windows
- Hacking Tools For Kali Linux
- Hacking Tools Github
- Pentest Tools Tcp Port Scanner
- Hacking Tools 2019
- Physical Pentest Tools
- Hacking Tools Kit
- Hacker Hardware Tools
- Install Pentest Tools Ubuntu
- Nsa Hacker Tools
- Pentest Tools Framework
- Install Pentest Tools Ubuntu
- Pentest Recon Tools
- Hacker Tools Linux
- Hacker Tools 2019
- Hacking Tools For Pc
- Pentest Tools Free
- Pentest Tools Framework
- Tools 4 Hack
- Pentest Box Tools Download
- Hack Tools
- Hacking Tools Hardware
- Hacker Tools Apk Download
- New Hacker Tools
- Pentest Tools Linux
- Best Hacking Tools 2019
- How To Make Hacking Tools
- Hack Tools Pc
- Pentest Tools Online
- Hacking Tools Free Download
- Pentest Tools Subdomain
- Hacker Hardware Tools
- Hacking Tools Online
- Hack Tools
- Tools For Hacker
- Hacking Tools
- Pentest Box Tools Download
- Tools For Hacker
- Nsa Hack Tools Download
- Pentest Tools Free
- Hack Tools For Games
- Pentest Tools For Ubuntu
- What Are Hacking Tools
- World No 1 Hacker Software
- Pentest Tools For Android
- Hack Website Online Tool
- Hacker Tools For Windows
- Black Hat Hacker Tools
- Hacker Tools Free
- Hacking Tools For Pc
- Hacking Tools For Windows
- Hacking Tools Usb
- Tools Used For Hacking
- How To Install Pentest Tools In Ubuntu
- Nsa Hack Tools Download
- Underground Hacker Sites
- Underground Hacker Sites
- Hacks And Tools
- Hacker Search Tools
- Hacker Hardware Tools
- Beginner Hacker Tools
- Hacking Tools For Windows
- Best Hacking Tools 2020
- Pentest Tools Android
- Hack Tools For Windows
- Hacking Tools
- Underground Hacker Sites
- Pentest Tools Android
- Hack Tools Github
- Hackrf Tools
- World No 1 Hacker Software
- Underground Hacker Sites
- Hacking Tools Pc
- Tools Used For Hacking
- Hacking Apps
- Github Hacking Tools
- Hacking Tools For Windows
- Usb Pentest Tools
- Pentest Automation Tools
- New Hack Tools
- Easy Hack Tools
- Pentest Reporting Tools
- Free Pentest Tools For Windows
- Hacking Tools For Windows
- Pentest Tools Website Vulnerability
- Pentest Tools Kali Linux
- Hack Tools
- Pentest Tools Subdomain
- Hacker Tools For Windows
- Pentest Automation Tools
- Easy Hack Tools
- Hacker Tools Github
- Pentest Tools Apk
- Hacking Tools Mac
- Hacking Tools For Windows 7
- Hacker Tools Linux
- Hacking Tools Kit
- Pentest Tools Alternative
- Hacker Tools Software
- Hacking Tools
- Hack Tools
- Termux Hacking Tools 2019
- Pentest Tools Find Subdomains
- Hack Tool Apk
- Nsa Hack Tools Download
- Hak5 Tools
- Hacker Tools Apk
- Pentest Tools Linux
- Pentest Tools
- Hacker Tools 2020
- Pentest Tools Bluekeep
- Hack Apps
- Hacker Tools Apk
- Hack Tools Mac
- Hack Tools Pc
- Hacker Tools List
- Bluetooth Hacking Tools Kali
- Hacker Tool Kit
- Black Hat Hacker Tools
- Pentest Tools Windows
- Hacking Tools For Windows 7
- Hacking Apps
- Pentest Tools Free
- Pentest Tools Nmap
- Pentest Tools Find Subdomains
- Easy Hack Tools
- Hack Website Online Tool
- Physical Pentest Tools
- Hacker Tool Kit
- Computer Hacker
- Beginner Hacker Tools
- Pentest Tools Android
- Hacking Tools Kit
- Best Hacking Tools 2019
- Hacker Tools Apk Download
No hay comentarios:
Publicar un comentario