Sophia's talk on using advanced features of the Binary Ninja API for vulnerability analysis is next up #youkillityoueatit
-
Sophia's 1st example: find where a program writes data to the stack. Easy to write, all python. Finds candidate stack smashes.
2nd example: Find all uninitialized variables in a program. Takes advantage of SSA form feature in Binja. Script is trivially small.
-
-
3rd example: Use Binja analyses to take practical advantage of symbolic execution. Usually too slow, but can target analysis with Binja.
-
3: Goal here is to find type confusion bugs with sign analysis. Ran the tool on PHP and it can find CVE-2016-6289. https://blog.fortinet.com/2016/08/10/analysis-of-php-s-cve-2016-6289-and-cve-2016-6297 …
- 6 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.