Introduction to Procedural Debugging through Binary Libification - Archive ouverte HAL
Communication Dans Un Congrès Année : 2024

Introduction to Procedural Debugging through Binary Libification

Résumé

Assessing the existence, exact impact and exploitability of a known (or theoretical) memory corruption vulnerability in an arbitrary piece of compiled software has arguably not become simpler. The current methodology essentially boils down to writing an exploit - or at least a trigger - for each potential vulnerability. Writing an exploit for a weird machine involves several undecidable steps, starting with overcoming the reachability problem. In this article, we introduce the notions of “libification” and “procedural debugging” to facilitate partial debugging of binaries at the procedural level. These techniques allow the transformation of arbitrary dynamically linked ELF binaries into shared libraries, and the study of memory corruption bugs by directly calling the vulnerable functions, hence separating the memory corruption intrapro- cedural analysis from the reachability problem. Finally, we publish a framework to implement such a libification un- der a permissive open-source license to facilitate its adoption within the security community.
Jonathan_Brossard_USENIX-WOOT_Philadelphia_2024.pdf (2.38 Mo) Télécharger le fichier
woot2024-brossard.pdf (174.6 Ko) Télécharger le fichier
Format Présentation
Origine Fichiers produits par l'(les) auteur(s)
Licence
Origine Fichiers produits par l'(les) auteur(s)
Licence

Dates et versions

hal-04671473 , version 2 (14-08-2024)
hal-04671473 , version 1 (20-08-2024)

Licence

Identifiants

  • HAL Id : hal-04671473 , version 1

Citer

Jonathan Brossard. Introduction to Procedural Debugging through Binary Libification. USENIX Workshop On Offensive Technologies (WOOT 24), USENIX, Aug 2024, Philadelphia (PA), United States. pp.17-25. ⟨hal-04671473v1⟩
132 Consultations
31 Téléchargements

Partager

More