Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Binary art - funky PoCs & visual docs
Search
Ange Albertini
March 21, 2014
Technology
1
250
Binary art - funky PoCs & visual docs
Ange Albertini
March 21, 2014
Tweet
Share
More Decks by Ange Albertini
See All by Ange Albertini
Fearsome File Formats
ange
0
730
Overview of file type identifiers
ange
0
1k
A question of time
ange
0
1k
SBuD: InfoVis in InfoSec
ange
1
830
Generating Weird Files
ange
0
360
Technical challenges with file formats
ange
1
2.2k
Inside out - abusing archive file formats
ange
3
1.8k
Relations between archive formats
ange
0
2k
Beyond your studies v2
ange
2
960
Other Decks in Technology
See All in Technology
ウォンテッドリーのデータパイプラインを支える ETL のための analytics, rds-exporter / analytics, rds-exporter for ETL to support Wantedly's data pipeline
unblee
0
140
急成長する企業で作った、エンジニアが輝ける制度/ 20250227 Rinto Ikenoue
shift_evolve
0
180
株式会社Awarefy(アウェアファイ)会社説明資料 / Awarefy-Company-Deck
awarefy
3
11k
EMConf JP 2025 懇親会LT / EMConf JP 2025 social gathering
sugamasao
2
200
Change Managerを活用して本番環境へのセキュアなGUIアクセスを統制する / Control Secure GUI Access to the Production Environment with Change Manager
yuj1osm
0
110
あなたが人生で成功するための5つの普遍的法則 #jawsug #jawsdays2025 / 20250301 HEROZ
yoshidashingo
2
320
Platform Engineeringで クラウドの「楽しくない」を解消しよう
jacopen
4
120
ABWG2024採択者が語るエンジニアとしての自分自身の見つけ方〜発信して、つながって、世界を広げていく〜
maimyyym
1
190
What's new in Go 1.24?
ciarana
1
110
Cracking the Coding Interview 6th Edition
gdplabs
14
28k
ディスプレイ広告(Yahoo!広告・LINE広告)におけるバックエンド開発
lycorptech_jp
PRO
0
500
クラウド食堂とは?
hiyanger
0
120
Featured
See All Featured
The Cult of Friendly URLs
andyhume
78
6.2k
jQuery: Nuts, Bolts and Bling
dougneiner
63
7.7k
The Language of Interfaces
destraynor
156
24k
Building Applications with DynamoDB
mza
93
6.2k
Agile that works and the tools we love
rasmusluckow
328
21k
Building Flexible Design Systems
yeseniaperezcruz
328
38k
BBQ
matthewcrist
87
9.5k
The Success of Rails: Ensuring Growth for the Next 100 Years
eileencodes
44
7k
Dealing with People You Can't Stand - Big Design 2015
cassininazir
366
25k
ピンチをチャンスに:未来をつくるプロダクトロードマップ #pmconf2020
aki_iinuma
114
51k
Music & Morning Musume
bryan
46
6.4k
The Art of Delivering Value - GDevCon NA Keynote
reverentgeek
11
1.3k
Transcript
Insomni’hack Geneva, Switzerland Ange Albertini 2014/03/21 funky PoCs & visual
docs
http:// corkami.com reverse engineering & visual documentations
boring? • file formats were supposed to be safe ◦
public specs ◦ open-source parsers • {weirdness} == {exploits} ? • software = parse, sanitize, recover
formats’ diversity 1/2 no header • COM (1982), MBR (1982)
magic signature • none: DOL (2001) • 2: TIFF, PE • 4: most standard • >4: PNG, PDF
start offset: • archives • range: PDF • mostly 0
special properties • deprecated header: PE • variable scanning direction: PDF • multi-versions: BMP • scanned chunk: JPEG • no official names: ZIP formats’ diversity 2/2
None
None
None
None
None
None
None
quine (relay)
None
polyglot
None
None
None
None
None
schizophren
None
misc
None
128, 217, 255, 217, 128, 38, 1, 38
None
None
None
crypto-tology: for anything crypto, ask @veorq (coz he’s awesome)
None
None
None
None
None
None
None
None
None
None
None
conclusion on binary formats
On binary formats • specs far from perfect • plenty
of fun • many consequences for infosec ◦ unforeseen attack channels
None
on visual docs http://pics.corkami.com http://prints.corkami.com
disclaimer no awards, no studies
None
None
None
None
goal create useful documentations based on reality
posters self-contained • immediate ‘big picture’ • no roleplay gamebook
use common sense and your own eyes
None
creativity? give yourself time! to fail!
None
None
None
None
None
define your audience lower and upper limits
“you should add …” see “setting a upper limit”
“too simple/simplified”? 1/ teach others, beginners, kids 2/ no more
excuses for not knowing
remove the obvious guessing doesn’t hurt
None
space optimal separator
left right
left right
left right
None
None
no unnecessary extras leave doors closed (to be opened somewhere
else)
requirements
a computer a transparent tablecloth
None
http://src.corkami.com
@jaredcatkinson’s prefetch101
conclusion on visual docs
On visual documentations • it doesn’t hurt • it’s not
so hard • requires time
Questions ? thank YOU ! @angealbertini ✉
[email protected]