Translate

segunda-feira, 24 de agosto de 2020

Introduction To Reversing Golang Binaries


Golang binaries are a bit hard to analyze but there are some tricks to locate the things and view what is doing the code.






Is possible to list all the go files compiled in the binary even in an striped binaries, in this case we have only one file gohello.go this is a good clue to guess what is doing the program.


On stripped binaries the runtime functions are not resolved so is more difficult to locate the user algorithms:


If we start from the entry point, we will found this mess:

The golang string initialization are encoded and is not displayed on the strings window.


How to locate main?  if its not stripped just bp on [package name].main for example bp main.main, (you can locate the package-name searching strings with ".main")


And here is our main.main:


The code is:

So in a stripped binary we cant find the string "hello world" neither the initialization 0x1337 nor the comparator 0x1337, all this is obfuscated.

The initialization sequence is:


The procedure for locating main.main in stripped binaries is:
1. Click on the entry point and locate the runtime.mainPC pointer:



2. click on runtime.main function (LAB_0042B030):


3. locate the main.main call after the zero ifs:



4. click on it and here is the main:




The runtime is not obvious for example the fmt.Scanf() call perform several internal calls until reach the syscall, and in a stripped binary there are no function names.



In order to identify the functions one option is compile another binary with symbols and make function fingerprinting.

In Ghidra we have the script golang_renamer.py which is very useful:


After applying this plugin the main looks like more clear:




This script is an example of function fingerprinting, in this case all the opcodes are included on the crc hashing:
# This script fingerprints the functions
#@author: sha0coder
#@category fingerprinting

print "Fingerprinting..."

import zlib


# loop through program functions
function = getFirstFunction()
while function is not None:
name = str(function.getName())
entry = function.getEntryPoint()
body = function.getBody()
addresses = body.getAddresses(True)

if not addresses.hasNext():
# empty function
continue

ins = getInstructionAt(body.getMinAddress())
opcodes = ''
while ins and ins.getMinAddress() <= body.getMaxAddress():
for b in ins.bytes:
opcodes += chr(b & 0xff)
ins = getInstructionAfter(ins)
crchash = zlib.crc32(opcodes) & 0xffffffff

print name, hex(crchash)


function = getFunctionAfter(function)





Related links

  1. Pentest Tools Tcp Port Scanner
  2. Hacking Tools Kit
  3. Hack Tools For Windows
  4. Hacker Tools For Windows
  5. Tools Used For Hacking
  6. Pentest Tools Framework
  7. Nsa Hack Tools
  8. Pentest Tools Windows
  9. Pentest Tools Kali Linux
  10. Best Hacking Tools 2020
  11. Hack Tools For Windows
  12. World No 1 Hacker Software
  13. Android Hack Tools Github
  14. Pentest Tools List
  15. Hacker Tools For Mac
  16. Hack Tools For Games
  17. Beginner Hacker Tools
  18. Hacker Tools For Mac
  19. Usb Pentest Tools
  20. Hacker
  21. Hacking Tools Usb
  22. Wifi Hacker Tools For Windows
  23. Hacking Tools Hardware
  24. Hacker Tools Apk Download
  25. Hacking Tools For Windows 7
  26. Hacker Tools Apk Download
  27. Hack Tools 2019
  28. Hack Tools Github
  29. Pentest Tools Linux
  30. Hacking Tools For Kali Linux
  31. Hacking Tools And Software
  32. Hacker Tools List
  33. World No 1 Hacker Software
  34. Hacking Tools And Software
  35. Hacking Tools Windows
  36. Hak5 Tools
  37. Pentest Tools Kali Linux
  38. Hack Tools For Windows
  39. Pentest Tools Free
  40. Blackhat Hacker Tools
  41. Install Pentest Tools Ubuntu
  42. Pentest Tools Nmap
  43. Black Hat Hacker Tools
  44. World No 1 Hacker Software
  45. Pentest Tools Review
  46. Wifi Hacker Tools For Windows
  47. Hacking Tools Hardware
  48. Hacks And Tools
  49. Hack Tools Pc
  50. Hacking Tools Kit
  51. Hacker Tools Windows
  52. How To Hack
  53. Pentest Tools Linux
  54. Growth Hacker Tools
  55. Pentest Tools List
  56. Hacking Tools 2019
  57. Pentest Tools Port Scanner
  58. How To Install Pentest Tools In Ubuntu
  59. Hacking Tools For Games
  60. Ethical Hacker Tools
  61. Easy Hack Tools
  62. Pentest Tools Android
  63. Hacking Tools
  64. Pentest Tools
  65. Pentest Tools List
  66. Hacking Tools Mac
  67. Hacking Tools Free Download
  68. Pentest Tools Review
  69. Hacking Tools Free Download
  70. Tools Used For Hacking
  71. Hacking Tools Pc
  72. Usb Pentest Tools
  73. Tools 4 Hack
  74. Wifi Hacker Tools For Windows
  75. Hack App
  76. Pentest Tools Github
  77. Hacking Tools Download
  78. Hacker Hardware Tools
  79. Pentest Tools
  80. Pentest Tools Free
  81. Hacker Tools For Windows
  82. Hacking Tools Mac
  83. Nsa Hacker Tools
  84. Install Pentest Tools Ubuntu
  85. Hacking Tools Windows 10
  86. Pentest Tools For Android
  87. Pentest Tools For Windows
  88. Pentest Tools For Ubuntu
  89. Hack Tools Online
  90. Hack Tools
  91. Hacking Tools Usb
  92. Pentest Tools Bluekeep
  93. Easy Hack Tools
  94. Tools For Hacker
  95. Hack Tools
  96. Hack Tools Mac
  97. Hacking Tools Hardware

Arquivo do blog