PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Visual C++ RTTI Inspection

blog.quarkslab.com | research | #windows | #reverse-engineering | #binary-analysis | #c | #rtti | #vftable
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Recovering Visual C++ class information from RTTI: the .data structures linking vftables to mangled class names (.?AV), and how decoding them eases analysis of virtual calls in compiled C++ binaries.
Published
Collected

Related coverage

research · blog.quarkslab.com
Extending LLVM's BOLT-based Binary Analyser to Validate Stack Variable Initialisation
Quarkslab extended LLVM's BOLT-based binary analyser for OSTIF with a scanner that validates -ftrivial-auto-var-init at the binary level, verifying stack-variable initialisation hardening.
research · blog.quarkslab.com
QBDI vs TritonDSE against a VM: who will be the fastest?
Quarkslab solves a custom-VM CTF challenge twice — with symbolic execution engine TritonDSE and instrumentation framework QBDI — and compares which approach gets to the solution fastest.
research · blog.quarkslab.com
Introducing TritonDSE: A framework for dynamic symbolic execution in Python
Introducing TritonDSE, a Python library atop Triton for customizable dynamic symbolic execution: high-level program exploration primitives, hooks, and the base of PASTIS's white-box fuzzer.
research · blog.quarkslab.com
Quokka: A Fast and Accurate Binary Exporter
Quarkslab open-sources Quokka, a binary exporter that extracts a program's disassembly for offline analysis, letting users write complex analyses without disassembler APIs.
research · blog.quarkslab.com
Binbloom blooms: introducing v2
Introducing binbloom v2, Quarkslab's firmware reverse-engineering tool: a new method to determine the load base address of both 32- and 64-bit firmware binaries.
research · blog.quarkslab.com
Quarkslab Internship Offers for 2019-2020
Quarkslab's 2019-2020 internship offers: five topics mostly around binary analysis, plus guidance on how to apply (CV, cover letter, and solving the attached assignment).
Back