Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
自作バイナリエディタを用いたバイナリ解析
Search
@tkmru
March 05, 2016
Programming
3
2.4k
自作バイナリエディタを用いたバイナリ解析
セキュリティ・キャンプ・フォーラム 2016/03/04
@tkmru
March 05, 2016
Tweet
Share
More Decks by @tkmru
See All by @tkmru
リバースエンジニアリング新時代へ! GhidraとClaude DesktopをMCPで繋ぐ/findy202507
tkmru
8
1.9k
Bring Your Own Container: When Containers Turn the Key to EDR Bypass/byoc-avtokyo2024
tkmru
2
1.5k
ipa-medit: Memory search and patch tool for IPA without Jailbreaking/ipa-medit-bh2022-europe
tkmru
0
350
Ipa-medit: Memory modification tool for iOS apps without Jailbreaking/ipa-medit-codeblue2022
tkmru
0
190
趣味と実益のための著名なOSSライブラリ起因の脆弱性の探求/seccamp2021-b5
tkmru
0
5.4k
Ipa-medit: Memory Search and Patch Tool for IPA Without Jailbreaking @Black Hat USA 2021 Arsenal/ipa-medit-bh2021-usa
tkmru
1
4.6k
Learn the essential way of thinking about vulnerabilities through post-exploitation on middlewares (MySQL/PostgreSQL編)/seccamp2020-b8
tkmru
3
900
apk-medit: memory search and patch tool for debuggable APK @CODE BLUE 2020 Bluebox
tkmru
0
210
apk-medit: memory search and patch tool for debuggable APK @Black Hat USA 2020 Arsenal/apk-medit-bh2020-usa
tkmru
0
4.2k
Other Decks in Programming
See All in Programming
知っているようで知らない"rails new"の世界 / The World of "rails new" You Think You Know but Don't
luccafort
PRO
1
100
プロポーザル駆動学習 / Proposal-Driven Learning
mackey0225
2
1.2k
ユーザーも開発者も悩ませない TV アプリ開発 ~Compose の内部実装から学ぶフォーカス制御~
taked137
0
140
250830 IaCの選定~AWS SAMのLambdaをECSに乗り換えたときの備忘録~
east_takumi
0
380
Design Foundational Data Engineering Observability
sucitw
3
190
サーバーサイドのビルド時間87倍高速化
plaidtech
PRO
0
720
HTMLの品質ってなんだっけ? “HTMLクライテリア”の設計と実践
unachang113
4
2.7k
機能追加とリーダー業務の類似性
rinchoku
2
1.2k
2025 年のコーディングエージェントの現在地とエンジニアの仕事の変化について
azukiazusa1
22
11k
How Android Uses Data Structures Behind The Scenes
l2hyunwoo
0
390
Vue・React マルチプロダクト開発を支える Vite
andpad
0
110
旅行プランAIエージェント開発の裏側
ippo012
2
890
Featured
See All Featured
Git: the NoSQL Database
bkeepers
PRO
431
66k
Building a Modern Day E-commerce SEO Strategy
aleyda
43
7.6k
Imperfection Machines: The Place of Print at Facebook
scottboms
268
13k
Creating an realtime collaboration tool: Agile Flush - .NET Oxford
marcduiker
31
2.2k
Fantastic passwords and where to find them - at NoRuKo
philnash
52
3.4k
What's in a price? How to price your products and services
michaelherold
246
12k
Java REST API Framework Comparison - PWX 2021
mraible
33
8.8k
Typedesign – Prime Four
hannesfritz
42
2.8k
Fight the Zombie Pattern Library - RWD Summit 2016
marcelosomers
234
17k
Save Time (by Creating Custom Rails Generators)
garrettdimon
PRO
32
1.5k
Learning to Love Humans: Emotional Interface Design
aarron
273
40k
XXLCSS - How to scale CSS and keep your sanity
sugarenia
248
1.3M
Transcript
ࣗ࡞όΠφϦΤσΟλΛ ༻͍ͨόΠφϦղੳ ˏtkmru ͚ͨ·Δ 2016-03-04 Fri Security Camp Forum
୭ʁ • ໊લ: ͚ͨ·Δ (@tkmru) • ॴଐ: େֶ ใཧֶ෦ •
CTFνʔϜ: TomoriNao
༑རಸॹ(SECCON 2015 Intercollege)
None
ຊ༑རಸॹͰͳ͘ ʮࣗ࡞όΠφϦΤσΟλΛ ༻͍ͨόΠφϦղੳʯ
όΠφϦΤσΟλͱ • ͲΜͳϑΝΠϧͰ16ਐͰදࣔ͢Δ • ͍͋͠ϑΝΠϧΛ࠷ॳʹͿͪࠐΉιϑτ
BZ http://www.forest.impress.co.jp/library/img/review/10014/html/bz1.jpg.html
Stirling http://1.bp.blogspot.com/-O5txkaVlhRg/US3i8jFWvjI/AAAAAAAAdTA/uaDiY_RHDMc/s1600/02.png
grep • όΠφϦΤσΟλ্ͰΑ͘ߦΘΕΔղੳٕ๏ • ࢹͰॏཁͦ͏ͳσʔλΛݟ͚ͭΔߦҝ • Ή͔͍ͣ͠
ʮҰൠతʹgrepόΠφϦΤ σΟλʹࡌ͞Ε͍ͯΔϏοτϚο ϓϏϡʔΛۦ͠ɺ ͑ΒΕͨ ؟ྗɺݚ͗·͞Εͨੜͷצ ʹΑͬͯൃش͞ΕΔೳྗͰ͋Γɺ ࿅ͷ߹͍ʹΑͬͯେ͖͘ݸਓ ͕ࠩੜ͡ΔೳྗͰ͋Δɻʯ https://gist.github.com/yoggy/4116843
ϓϩʹ͔͠Ͱ͖ͳ͍
طଘͷόΠφϦΤσΟλͷෆຬ • mac͚ʹσϑΝΫτελϯμʔυͱ͍͑ Δͷ͕ͳ͍ • ϓϩͰͳ͍ਓ͕grep͢Δͱݟམͱ͕͠ൃ ੜ͢Δ → ΫϩεϓϥοτϑΥʔϜͰղੳΛࣗಈԽͯ͠ ͘ΕΔόΠφϦΤσΟλ͕΄͍͠
ͦ͜Ͱࣗ࡞όΠφϦΤσΟλ
biwx(ͼ͎ͬ͘͢)
ࡐྉ • Python • wxPython - C++ͷGUIϥΠϒϥϦ ʮwxWidgetsʯͷϥούʔ binary editor
+ wxPython = biwx
ಛ • ΫϩεϓϥοτϑΥʔϜ • Φʔϓϯιʔε • ϑΝΠϧͷγάωΠνϟΛ৭͚ • ৄࡉใΛදࣔ(γάωΠνϟͷॴɺPDFͷύʔε) •
ࣗಈղੳػೳ
ࣗಈղੳػೳ • Έࠐ·ΕͨϑΝΠϧͷΓग़͠ • όΠφϦͷ୯७ͳΓग़͠ • PDFͷࣗಈύʔε
σϞ1 SECCON CTF 2015 Steganography 1 MrFusion.gpjb
MrFusion.gpjb • Α͔͘Βͳ͍ϑΝΠϧ͕༩͑ΒΕΔ • ͳ͔ʹෳͷը૾ϑΝΠϧ͕Ӆ͞Ε͍ͯΔ • औΓग़ͯ͠ॱ൪ʹಡΊ͕͔͑Δ
flag SECCON{OCT 21 2015 0728}
σϞ2 malicious PDFͷղੳ
malicious PDFͷղੳ • PDFʹJavaScriptίʔυΛຒΊࠐΊΔ • Adobe ReaderͰ JavaScript ࣮ߦݖݶ͕༗ޮ ʹͳ͍ͬͯΕ࣮ߦ͞ΕΔ
ࠓޙͷల • ࣗಈղੳػೳͷ֦ॆ • γΣϧίʔυͷղੳ • ղੳऀ͕Ѫ༻͢Δπʔϧʹҭ͍͖͍ͯͯͨ
͝ਗ਼ௌ͋Γ͕ͱ͏͍͟͝·ͨ͠