Vlang Binary Debugging

Why vlang? V is a featured, productive, safe and confortable language highly compatible with c, that generates neat binaries with c-speed, the decompilation also seems quite clear as c code.
https://vlang.io/

After open the binary with radare in debug mode "-d" we proceed to do the binary recursive analysis with "aaaa" the more a's the more deep analys.

The function names are modified when the binary is crafted, if we have a function named hello in a module named main we will have the symbol main__hello, but we can locate them quicly thanks to radare's grep done with "~" token in this case applied to the "afl" command which lists all the symbols.

Being in debug mode we can use "d*" commands, for example "db" for breakpointing the function and then "dc" to start or continue execution.

Let's dissasemble the function with "pD" command, it also displays the function variables and arguments as well, note also the xref "call xref from main"

Let's take a look to the function arguments, radare detect's this three 64bits registers used on the function.

Actually the function parameter is rsi that contains a testing html to test the href extraction algorithm.

The string structure is quite simple and it's plenty of implemented methods.

With F8 we can step over the code as we were in ollydbg on linux.

Note the rip marker sliding into the code.

We can recognize the aray creations, and the s.index_after() function used to find substrings since a specific position.

If we take a look de dissasembly we sill see quite a few calls to tos3() functions.
Those functions are involved in string initialization, and implements safety checks.

• tos(string, len)
• tos2(byteptr)
• tos3(charptr)

In this case I have a crash in my V code and I want to know what is crashing, just continue the execution with "dc" and see what poits the rip register.

In visual mode "V" we can see previous instructions to figure out the arguments and state.

We've located the crash on the substring operation which is something like "s2 := s1[a..b]" probably one of the arguments of the substring is out of bounds but luckily the V language has safety checks and is a controlled termination:

Switching the basic block view "space" we can see the execution flow, in this case we know the loops and branches because we have the code but this view also we can see the tos3 parameter "href=" which is useful to locate the position on the code.

When it reach the substr, we can see the parameters with "tab" command.

Looking the implementation the radare parameter calculation is quite exact.

Let's check the param values:

so the indexes are from 0x0e to 0x24 which are inside the buffer, lets continue to next iteration,
if we set a breakpoint and check every iteration, on latest iteration before the crash we have the values 0x2c to 0x70 with overflows the buffer and produces a controlled termination of the v compiled process.

Related links

1. Pentest Tools Review
2. New Hacker Tools
3. Hacker Tools Apk
4. Hacker Tools 2020
5. Pentest Tools Linux
6. Growth Hacker Tools
7. Hack Tools
8. Pentest Tools Nmap
9. Pentest Tools Kali Linux
10. Hack App
11. Hacking Tools For Windows 7
12. Pentest Automation Tools
13. Hacker Tools Mac
14. Pentest Tools For Android
15. Hacker Tools Github
16. Hacker Tools List
17. Pentest Tools List
18. Hacker Tools
19. Hack Tools For Mac
20. Hack Rom Tools
21. Black Hat Hacker Tools
22. Hacker Tools Linux
23. Hack Tool Apk No Root
24. What Are Hacking Tools
25. Physical Pentest Tools
26. Hacking Tools Github
27. Pentest Tools Kali Linux
28. New Hacker Tools
29. Pentest Tools Kali Linux
30. Easy Hack Tools
31. Hacking Tools For Windows 7
32. Pentest Tools For Mac
33. Pentest Tools Website
34. Pentest Tools Tcp Port Scanner
35. Termux Hacking Tools 2019
36. Computer Hacker
37. Pentest Tools Nmap
38. Hack Tools For Games
39. Hacker Search Tools
40. Free Pentest Tools For Windows
41. Pentest Recon Tools
42. Hack Tools Mac
43. Termux Hacking Tools 2019
44. Hack Tools For Windows
45. Usb Pentest Tools
46. Pentest Tools Github
47. Github Hacking Tools
48. Pentest Tools Linux
49. Blackhat Hacker Tools
50. Pentest Tools Website
51. Hacker Tools For Windows
52. Nsa Hacker Tools
53. Pentest Tools Find Subdomains
54. Bluetooth Hacking Tools Kali
55. Pentest Automation Tools
56. Hack App
57. Pentest Tools Alternative
58. Hacking Apps
59. Underground Hacker Sites
60. Pentest Tools Find Subdomains
61. Pentest Tools Apk
62. Pentest Tools Tcp Port Scanner
63. Hacking Tools Windows 10
64. Hack Tools
65. Bluetooth Hacking Tools Kali
66. Hacker Tools Github
67. Hacking Tools For Beginners