Introduction to Procedural Debugging through Binary Libification - Archive ouverte HAL
Communication Dans Un Congrès Année : 2024

Introduction to Procedural Debugging through Binary Libification

Introduction au debogage procedural via la libification binaire

Résumé

Assessing the existence, exact impact and exploitability of a known (or theoretical) memory corruption vulnerability in an arbitrary piece of compiled software has arguably not become simpler. The current methodology essentially boils down to writing an exploit - or at least a trigger - for each potential vulnerability. Writing an exploit for a weird machine involves several undecidable steps, starting with overcoming the reachability problem. In this article, we introduce the no- tions of “libification” and “procedural debugging” to facilitate partial debugging of binaries at the procedural level. These techniques allow the transformation of arbitrary dynamically linked ELF binaries into shared libraries, and the study of memory corruption bugs by directly calling the vulnerable functions, hence separating the memory corruption intrapro- cedural analysis from the reachability problem. Finally, we publish a framework to implement such a libification un- der a permissive open-source license to facilitate its adoption within the security community.
Fichier principal
Vignette du fichier
woot24-brossard_1.pdf (384.62 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04671473 , version 2 (14-08-2024)
hal-04671473 , version 1 (20-08-2024)

Licence

Identifiants

  • HAL Id : hal-04671473 , version 2

Citer

Jonathan Brossard. Introduction to Procedural Debugging through Binary Libification. 18th USENIX WOOT Conference on Offensive Technologies, USENIX, Aug 2024, Philadelphia, PA, United States. pp.17-25. ⟨hal-04671473v2⟩
132 Consultations
31 Téléchargements

Partager

More