Skip to content

Instantly share code, notes, and snippets.

View tin-z's full-sized avatar

Altin (tin-z) tin-z

View GitHub Profile
@tin-z
tin-z / roadmap_fuzzing.md
Created March 13, 2022 21:51
Roadmap to learn fuzzing

Roadmap to learn fuzzing


Index

1. Sanitizers
2. Intro-to-fuzzing
@tin-z
tin-z / roadmap_variant analysis_vuln.md
Created March 13, 2022 21:50
Roadmap to learn variant analysis in software vulnerability research

roadmap to variant analysis


CodeQl

@tin-z
tin-z / idapython_cheatsheet.md
Created February 28, 2022 22:05 — forked from icecr4ck/idapython_cheatsheet.md
Cheatsheet for IDAPython
@tin-z
tin-z / Makefile
Created June 6, 2021 10:54 — forked from kwk/Makefile
Compiling with Address Sanitizer (ASAN) with CLANG and with GCC-4.8
.PHONY: using-gcc using-gcc-static using-clang
using-gcc:
g++-4.8 -o main-gcc -lasan -O -g -fsanitize=address -fno-omit-frame-pointer main.cpp && \
ASAN_OPTIONS=symbolize=1 ASAN_SYMBOLIZER_PATH=$(shell which llvm-symbolizer) ./main-gcc
using-gcc-static:
g++-4.8 -o main-gcc-static -static-libstdc++ -static-libasan -O -g -fsanitize=address -fno-omit-frame-pointer main.cpp && \
ASAN_OPTIONS=symbolize=1 ASAN_SYMBOLIZER_PATH=$(shell which llvm-symbolizer) ./main-gcc-static
import sys, os
import ctypes
import math
import struct
#### Ignore ####
EC = '\x1b[0m'
BOLD = '\x1b[1m'

radare2

Basics

load without any analysis (file header at offset 0x0): r2 -n /path/to/file

  • analyze all: aa
  • show sections: iS
  • list functions: afl
  • list imports: ii