Главная
Study mode:
on
1
MICKEY JIN
2
# whoami
3
What is SBI/DBI ?
4
My First Idea
5
IDA2MASM: My First Solution
6
Export ASM File
7
Split By Segments
8
Re-Assemble
9
Tune Grammar List (Partial)
10
Link Issue
11
Link Solution
12
Patch The New Built Binary
13
Crash Root Cause
14
Think Of The Essence
15
My Second Idea (Algorithm)
16
Linker Does The Magic
17
Object File Format • Object file is COFF (Common Object File Format)
18
cough: Object File Writer • Repo : Install: pip install cough Tutorial
19
Encapsulate Some Primitives
20
Dump Objects
21
Instrumentation & Trampoline
22
Architecture
23
_afl_maybe_log
24
Harness
25
The Real Challenge & The Solu
26
FixRVA.py
27
Compression Scheme of FH4
28
Solution For FH4
29
Takeaway Two SBI implementations
30
Future Plan
31
HITB SECCONF SIN-2021 VIRTUAL EDITION
Description:
Explore a powerful tool for static binary instrumentation in this conference talk from Hack In The Box Security Conference. Learn about IDA2Obj, a tool designed to dump multiple object files from a single executable binary, enabling faster code coverage collection and integration with popular fuzzing engines. Discover the implementation process, challenges faced, and solutions developed by the creator, Mickey Jin. Gain insights into integrating IDA2Obj with fuzzing engines and witness a live demonstration of the tool in action. Delve into topics such as COFF object file format, object file writing, instrumentation techniques, and solutions for specific challenges like RVA fixing and compression schemes. Understand the advantages of this static binary instrumentation approach compared to dynamic binary instrumentation solutions, and explore future plans for the tool's development.

IDA2Obj - Static Binary Instrumentation on Steroids

Hack In The Box Security Conference
Add to list