metasm
play

Metasm un framework pour code machine Yoann Guillot Plan Intro - PowerPoint PPT Presentation

Aug 30, 2022 •285 likes •462 views

Metasm un framework pour code machine Yoann Guillot Plan Intro Applications Exemples Sommaire Prsentation du framework Aperu de larchitecture Fonctionnalits Ce qui devient possible Exemples ( Unrestricted ) Research &

  1. Metasm un framework pour code machine Yoann Guillot

  2. Plan Intro Applications Exemples Sommaire Présentation du framework Aperçu de l’architecture Fonctionnalités Ce qui devient possible Exemples ( Unrestricted ) Research & Development SSTIC 2007 – Metasm May 29, 2007

  3. Plan Intro Applications Exemples Présentation du framework Metasm est un framework de manipulation de code machine Code exécutable multi-architecture (actuellement Ia32 et MIPS) Formats de fichier exécutables Windows et GNU/Linux Interaction avec un système en cours d’exécution Ecrit intégralement en Ruby Licence LGPL ( Unrestricted ) Research & Development SSTIC 2007 – Metasm May 29, 2007

  4. Plan Intro Applications Exemples Architecture interne Exeformat Blocks CPU Sections DecInstr Opcodes EncData Instructions ( Unrestricted ) Research & Development SSTIC 2007 – Metasm May 29, 2007

  5. Plan Intro Applications Exemples Assemblage de code machine Fournit une chaine relogeable : EncodedData Code machine Relocations Exports Espace virtuel Sépare l’assemblage du linkage Démonstration ( Unrestricted ) Research & Development SSTIC 2007 – Metasm May 29, 2007

  6. Plan Intro Applications Exemples Désassemblage de code machine Puissant moteur de backtracking Suit précisément le flot d’exécution Mais manque actuellement de support d’appels externes Permettra de tracer les accès data La partie spécifique à une architecture est minimale Démonstration ( Unrestricted ) Research & Development SSTIC 2007 – Metasm May 29, 2007

  7. Plan Intro Applications Exemples Gestion de fichiers exécutables Lecture Depuis un fichier Depuis la mémoire Écriture Modification Génération from scratch Support de MZ/PE/COFF et ELF ( Unrestricted ) Research & Development SSTIC 2007 – Metasm May 29, 2007

  8. Plan Intro Applications Exemples Interaction avec le système d’exploitation Abstraction de la mémoire d’un processus cible Lecture/écriture transparente Fournit une API générique Démonstration ( Unrestricted ) Research & Development SSTIC 2007 – Metasm May 29, 2007

  9. Plan Intro Applications Exemples Ce qui devient possible Modification arbitraire du processus d’assemblage/désasseblage Facilite énormément toute interaction avec du code machine ( Unrestricted ) Research & Development SSTIC 2007 – Metasm May 29, 2007

  10. Plan Intro Applications Exemples Intégration à Metasploit3 Metasploit 3 est écrit en ruby Mais le support du code machine est très mauvais Shellcodes en hexa Bidouilles pour “patcher” ces shellcodes au runtime Re-bidouille pour lier différents stages Avec Metasm : 1 - Shellcodes sous forme de code source 2 - Linkage standard pour les relocations 3 - Linkage standard pour les stages 4 - ???? 5 - Profit ( Unrestricted ) Research & Development SSTIC 2007 – Metasm May 29, 2007

  11. Plan Intro Applications Exemples Exemples Metasm-shell ( Unrestricted ) Research & Development SSTIC 2007 – Metasm May 29, 2007

  12. Plan Intro Applications Exemples Exemples Lecture d’un ELF MIPS ( Unrestricted ) Research & Development SSTIC 2007 – Metasm May 29, 2007

  13. Plan Intro Applications Exemples Exemples Compilation d’un exécutable PE ( Unrestricted ) Research & Development SSTIC 2007 – Metasm May 29, 2007

  14. Plan Intro Applications Exemples Exemples Modification d’un exécutable PE ( Unrestricted ) Research & Development SSTIC 2007 – Metasm May 29, 2007

  15. Plan Intro Applications Exemples Exemples Hook basique Windows ( Unrestricted ) Research & Development SSTIC 2007 – Metasm May 29, 2007

  16. Plan Intro Applications Exemples Exemples Hooks avancés Windows ( Unrestricted ) Research & Development SSTIC 2007 – Metasm May 29, 2007

  17. Plan Intro Applications Exemples Conclusion Merci de votre attention ! Des questions ? ( Unrestricted ) Research & Development SSTIC 2007 – Metasm May 29, 2007

Download Presentation
Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend

Metasm a ruby (dis)assembler Yoann Guillot 20 october 2007 Metasm Demonstrations Presentation

Metasm a ruby (dis)assembler Yoann Guillot 20 october 2007 Metasm Demonstrations Presentation

Metasm a ruby (dis)assembler Yoann Guillot 20 october 2007 Metasm Demonstrations Presentation I am Yoann Guillot I work for Sogeti/ESEC in the security R&D lab Metasm HACK.LU 2007 2 / 23 Architecture overview Assembly Disassembly

708 views • 26 slides
RECON 2010 - Montreal Metasm Tracer MSR NIC Plan Metasm 1 Tracer 2 MSR 3 NIC 4 A.

RECON 2010 - Montreal Metasm Tracer MSR NIC Plan Metasm 1 Tracer 2 MSR 3 NIC 4 A.

Metasm Feelings Alexandre Gazet Yoann Guillot Sogeti / ESEC R&D Sogeti / ESEC R&D alexandre.gazet(at)sogeti.com yoann.guillot(at)sogeti.com RECON 2010 - Montreal Metasm Tracer MSR NIC Plan Metasm 1 Tracer 2 MSR 3 NIC 4

508 views • 25 slides
D eprotection semi-automatique de binaire avec Metasm : celui qui fond dans la bouche et pas

D eprotection semi-automatique de binaire avec Metasm : celui qui fond dans la bouche et pas

Metasm Manipulation structurelle Challenge T2 2007 Conclusion D eprotection semi-automatique de binaire avec Metasm : celui qui fond dans la bouche et pas dans la main. Alexandre Gazet Yoann Guillot A. Gazet & Y. Guillot D

743 views • 52 slides
HITB 2009 Metasm Debugger Analysis of a protection Compiler Decompilation Disassembler Plan

HITB 2009 Metasm Debugger Analysis of a protection Compiler Decompilation Disassembler Plan

Binary deprotection with metasm and stuff Alexandre Gazet Yoann Guillot Sogeti / ESEC R&D Sogeti / ESEC R&D alexandre.gazet(at)sogeti.com yoann.guillot(at)sogeti.com HITB 2009 Metasm Debugger Analysis of a protection Compiler

767 views • 59 slides
Evaluating variants of the Lesk Approach for Disambiguating Words Florentina Vasilescu Philippe

Evaluating variants of the Lesk Approach for Disambiguating Words Florentina Vasilescu Philippe

Evaluating variants of the Lesk Approach for Disambiguating Words Florentina Vasilescu Philippe Langlais Guy Lapalme Universit e de Montr eal Outline Fast recap of the Lesk approach (Lesk, 1986) Motivations Implemented

1.06k views • 19 slides
HOT AND STEAMY ALTERATION of the PRIMORDIAL MARTIAN CRUST by SUPERCRITICAL FLUIDS during MAGMA

HOT AND STEAMY ALTERATION of the PRIMORDIAL MARTIAN CRUST by SUPERCRITICAL FLUIDS during MAGMA

HOT AND STEAMY ALTERATION of the PRIMORDIAL MARTIAN CRUST by SUPERCRITICAL FLUIDS during MAGMA OCEAN COOLING Kevin M. Cannon Stephen W. Parman John F. Mustard 1 Crustal alteration: x-y extent (Mustard et al. 2008; Carter et al. 2013) from

478 views • 27 slides
Auto-Fractal: (R-)assemblage dynamique et automatique d'applications base de composants

Auto-Fractal: (R-)assemblage dynamique et automatique d'applications base de composants

1 Journ e e ADAPT ADAPT du du GdR GdR ASR ( ASR (Perpi Perpi 2006) 2006) Journ 3 octobre octobre 2006 2006 Perpignan Perpignan, France , France 3 Auto-Fractal: (R-)assemblage dynamique et automatique

534 views • 35 slides
Summary of MTSRF Project 1.1.4 One honours project finished (Jill Quaintance) Two Ph.D

Summary of MTSRF Project 1.1.4 One honours project finished (Jill Quaintance) Two Ph.D

Summary of MTSRF Project 1.1.4 One honours project finished (Jill Quaintance) Two Ph.D recruited (Jez Roff and Cameron Pietsch) One paper submitted to Quaternary International Four topics (financially supported by Project

423 views • 8 slides
1 N O T IC E IN V IT IN G T E N D E R S O nline electronic bids are invited for and on

1 N O T IC E IN V IT IN G T E N D E R S O nline electronic bids are invited for and on

of G eology KJIHGFEDCBA D epartm ent U n iv e r sity o f D e lh i D e lh i -1 1 0 0 0 7 G e n e r a l S e c tio n 30.3.2017 T E N D E R N O T IC E P r e p a r a tio n o f M ic r o p a le o to lo g ic a l S ealed tenders are invited

686 views • 11 slides
Tangible User Interface Ludovic GARREAU, Nadine COUTURE LIPSI-ESTIA (biarritz), LaBRI (bordeaux)

Tangible User Interface Ludovic GARREAU, Nadine COUTURE LIPSI-ESTIA (biarritz), LaBRI (bordeaux)

TUI ESKUA Design September, 8 th Monday 2003 : Physical interaction Workshop on Real World User Interfaces Sample Context Mobile HCI Conference 2003 in Udine Study of Tangible User H uman C omputer Interface for handling I

434 views • 5 slides
Outline DMP204 SCHEDULING, TIMETABLING AND ROUTING 1. University Timetabling Lecture 19

Outline DMP204 SCHEDULING, TIMETABLING AND ROUTING 1. University Timetabling Lecture 19

University Timetabling Outline DMP204 SCHEDULING, TIMETABLING AND ROUTING 1. University Timetabling Lecture 19 Formalization and Modelling University Timetabling An Example Timetabling in Practice Marco Chiarandini 2 Modelling

777 views • 8 slides
Experimental Techniques Rick Van Kooten Indiana University Fifth CERN-Fermilab Hadron Collider

Experimental Techniques Rick Van Kooten Indiana University Fifth CERN-Fermilab Hadron Collider

Experimental Techniques Rick Van Kooten Indiana University Fifth CERN-Fermilab Hadron Collider Physics Summer School Fermilab, Batavia, IL 2426 Aug. 2010 Introduction "Experimental Techniques" Often taken as covering tracking,

832 views • 51 slides
Automated generation of time- predictable executables on multi- core hardware Claire Pagetti,

Automated generation of time- predictable executables on multi- core hardware Claire Pagetti,

Automated generation of time- predictable executables on multi- core hardware Claire Pagetti, Julien Forget, Heiko Falk, Dominic Oehlert, and Arno Luppold October 10 th 2018 RTNS 2018 Claire Pagetti RTNS 2018 1/28 Outline

388 views • 28 slides
Introduction (Motivation) In 2015, a total of 728 millions of public pictures were uploaded to

Introduction (Motivation) In 2015, a total of 728 millions of public pictures were uploaded to

Introduction (Motivation) In 2015, a total of 728 millions of public pictures were uploaded to Flickr Such large amount of user-generated data makes multimedia indexing and retrieval a more challenging task However, it also opens new

501 views • 13 slides
The Heart Sutra Amitabha Buddhist Center November 24, 2018 Why is emptiness important? The

The Heart Sutra Amitabha Buddhist Center November 24, 2018 Why is emptiness important? The

The Heart Sutra Amitabha Buddhist Center November 24, 2018 Why is emptiness important? The realization of emptiness is the main antidote to ignorance Ignorance is the root of all our problems Without the realization of emptiness, it is

481 views • 25 slides
Introduction to Finite Element Method Introductory Course on Multiphysics Modelling T OMASZ G. Z

Introduction to Finite Element Method Introductory Course on Multiphysics Modelling T OMASZ G. Z

Introduction Strong and weak forms Galerkin method Finite element model Introduction to Finite Element Method Introductory Course on Multiphysics Modelling T OMASZ G. Z IELI NSKI bluebox.ippt.pan.pl/tzielins/ Institute of Fundamental

982 views • 75 slides
1 RE Outreach Seminar Evolution in Enforcement 4 & 7 June 2019 Reserve Bank of New

1 RE Outreach Seminar Evolution in Enforcement 4 & 7 June 2019 Reserve Bank of New

1 RE Outreach Seminar Evolution in Enforcement 4 & 7 June 2019 Reserve Bank of New Zealand AML/CFT Supervision Team Overview Todays objective is to clearly communicate to our Reporting Entities (REs) upcoming changes in our

642 views • 28 slides
MAKO document reference: 60667860 Document prepared: 18 November 2016 Prepared by:

MAKO document reference: 60667860 Document prepared: 18 November 2016 Prepared by:

MAKO document reference: 60667860 Document prepared: 18 November 2016 Prepared by: bede.clarke@mbie.govt.nz 1 2 Scientific evidence shows that fencing reduces drowning (Thompson and Rivara 1998). Drownings decreased dramatically after the

606 views • 9 slides
A point of MCGUINNESS INSTITUTE TE HONONGA WAKA vanishing stability NZ Exploring a climate

A point of MCGUINNESS INSTITUTE TE HONONGA WAKA vanishing stability NZ Exploring a climate

A point of MCGUINNESS INSTITUTE TE HONONGA WAKA vanishing stability NZ Exploring a climate strategy for New Zealand Navigating with foresight NZ #ClimateStrategyNZ WiFi: wellington wellington Thanks to our suppliers: 1. VISIT THE SLI.DO

1.2k views • 33 slides
U.S. Health Insurance Policy: Recent History and Future Directions North Carolina Institute Of

U.S. Health Insurance Policy: Recent History and Future Directions North Carolina Institute Of

U.S. Health Insurance Policy: Recent History and Future Directions North Carolina Institute Of Medicine Legislative Health Policy Fellows Program S ara R. Collins, Ph.D. Vice President, Health Care Coverage and Access The Commonwealth Fund

576 views • 25 slides
Dealing with Landgate Practical Issues for Trustees Presented by Rob Wallman HLB Mann Judd

Dealing with Landgate Practical Issues for Trustees Presented by Rob Wallman HLB Mann Judd

Wednesday, 1 June 2016 Peak Indebtedness and Preferences A New Zealand Experience Presented by Ray Christensen Zilkens Lawyers And Dealing with Landgate Practical Issues for Trustees Presented by Rob Wallman HLB Mann Judd

572 views • 11 slides
Guardians of NZ Superannuation and New Zealand Superannuation Fund 2018-19 Review AUTHOR:

Guardians of NZ Superannuation and New Zealand Superannuation Fund 2018-19 Review AUTHOR:

TITLE: Guardians of NZ Superannuation and New Zealand Superannuation Fund 2018-19 Review AUTHOR: Catherine Savage Matt Whineray CHAIR CEO EVENT | PRESENTATION: Finance &

348 views • 22 slides
Smokescreen or the Real Deal: Website Privacy Notices Gehan Gunasekara & Nora Xharra The

Smokescreen or the Real Deal: Website Privacy Notices Gehan Gunasekara & Nora Xharra The

Smokescreen or the Real Deal: Website Privacy Notices Gehan Gunasekara & Nora Xharra The University of Auckland Business School Introduction Privacy public issue in NZ and overseas E.g. Snowden, multiple breaches by Govt. agencies

693 views • 34 slides
New Zealand Energy Strategy October 2007 David Parker Minister of Energy, Minister Responsible

New Zealand Energy Strategy October 2007 David Parker Minister of Energy, Minister Responsible

New Zealand Energy Strategy October 2007 David Parker Minister of Energy, Minister Responsible for Climate Change Issues Renewables future makes economic sense NZs Low carbon electricity India Australia China United States Mexico

389 views • 12 slides

More recommend