Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Binary art - funky PoCs & visual docs
Search
Ange Albertini
March 21, 2014
Technology
1
250
Binary art - funky PoCs & visual docs
Ange Albertini
March 21, 2014
Tweet
Share
More Decks by Ange Albertini
See All by Ange Albertini
Fearsome File Formats
ange
0
730
Overview of file type identifiers
ange
0
1k
A question of time
ange
0
1k
SBuD: InfoVis in InfoSec
ange
1
830
Generating Weird Files
ange
0
360
Technical challenges with file formats
ange
1
2.2k
Inside out - abusing archive file formats
ange
3
1.8k
Relations between archive formats
ange
0
2k
Beyond your studies v2
ange
2
950
Other Decks in Technology
See All in Technology
クラウド関連のインシデントケースを収集して見えてきたもの
lhazy
8
1.1k
RemoveだらけのPHPUnit 12に備えよう
cocoeyes02
0
290
php-conference-nagoya-2025
fuwasegu
0
150
AWSを活用したIoTにおけるセキュリティ対策のご紹介
kwskyk
0
350
入門 PEAK Threat Hunting @SECCON
odorusatoshi
0
160
IAMポリシーのAllow/Denyについて、改めて理解する
smt7174
2
210
Apache Iceberg Case Study in LY Corporation
lycorptech_jp
PRO
0
320
ExaDB-XSで利用されているExadata Exascaleについて
oracle4engineer
PRO
3
260
手を動かしてレベルアップしよう!
maruto
0
220
Exadata Database Service on Cloud@Customer セキュリティ、ネットワーク、および管理について
oracle4engineer
PRO
2
1.5k
Windows の新しい管理者保護モード
murachiakira
0
200
JAWS FESTA 2024「バスロケ」GPS×サーバーレスの開発と運用の舞台裏/jawsfesta2024-bus-gps-serverless
ma2shita
3
200
Featured
See All Featured
Adopting Sorbet at Scale
ufuk
74
9.2k
Testing 201, or: Great Expectations
jmmastey
42
7.2k
Raft: Consensus for Rubyists
vanstee
137
6.8k
Product Roadmaps are Hard
iamctodd
PRO
50
11k
Dealing with People You Can't Stand - Big Design 2015
cassininazir
366
25k
Evolution of real-time – Irina Nazarova, EuRuKo, 2024
irinanazarova
6
570
Why Our Code Smells
bkeepers
PRO
336
57k
How to Ace a Technical Interview
jacobian
276
23k
What’s in a name? Adding method to the madness
productmarketing
PRO
22
3.3k
Making Projects Easy
brettharned
116
6k
How to Think Like a Performance Engineer
csswizardry
22
1.4k
Bootstrapping a Software Product
garrettdimon
PRO
306
110k
Transcript
Insomni’hack Geneva, Switzerland Ange Albertini 2014/03/21 funky PoCs & visual
docs
http:// corkami.com reverse engineering & visual documentations
boring? • file formats were supposed to be safe ◦
public specs ◦ open-source parsers • {weirdness} == {exploits} ? • software = parse, sanitize, recover
formats’ diversity 1/2 no header • COM (1982), MBR (1982)
magic signature • none: DOL (2001) • 2: TIFF, PE • 4: most standard • >4: PNG, PDF
start offset: • archives • range: PDF • mostly 0
special properties • deprecated header: PE • variable scanning direction: PDF • multi-versions: BMP • scanned chunk: JPEG • no official names: ZIP formats’ diversity 2/2
None
None
None
None
None
None
None
quine (relay)
None
polyglot
None
None
None
None
None
schizophren
None
misc
None
128, 217, 255, 217, 128, 38, 1, 38
None
None
None
crypto-tology: for anything crypto, ask @veorq (coz he’s awesome)
None
None
None
None
None
None
None
None
None
None
None
conclusion on binary formats
On binary formats • specs far from perfect • plenty
of fun • many consequences for infosec ◦ unforeseen attack channels
None
on visual docs http://pics.corkami.com http://prints.corkami.com
disclaimer no awards, no studies
None
None
None
None
goal create useful documentations based on reality
posters self-contained • immediate ‘big picture’ • no roleplay gamebook
use common sense and your own eyes
None
creativity? give yourself time! to fail!
None
None
None
None
None
define your audience lower and upper limits
“you should add …” see “setting a upper limit”
“too simple/simplified”? 1/ teach others, beginners, kids 2/ no more
excuses for not knowing
remove the obvious guessing doesn’t hurt
None
space optimal separator
left right
left right
left right
None
None
no unnecessary extras leave doors closed (to be opened somewhere
else)
requirements
a computer a transparent tablecloth
None
http://src.corkami.com
@jaredcatkinson’s prefetch101
conclusion on visual docs
On visual documentations • it doesn’t hurt • it’s not
so hard • requires time
Questions ? thank YOU ! @angealbertini ✉
[email protected]