Skip to content

Latest commit

 

History

History

The spirit of the 90s is alive in Brooklyn

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
 
 

The Spirit of the 90s is Alive in Brooklyn

Using the tools and techniques of today to solve problems that only existed in the 90s and are still alive in DEFCON CTF. We explain and demo tools built on Binary Ninja’s BNIL to find 90s era bugs such as format string vulnerabilities, stack buffer overflows, and command injection.

Presented at

Resources

Binary Ninja Plugins

  • uninitialized_variable_finder.py - Find uses of uninitialized variables
  • uninitialized_variable_finder.py - Abstract interpretation using lattices to analyse the possible sign of a variable at any point in a program
  • binja_memcpy.py - Demonstrates Binary Ninja's headless API for python by finding memcpy's and cooresponding src/dst information. It can be easily modified to find argument information for other function calls.
  • walk_via_dfs.py - A plugin template to walk the Binary Ninja CFG using the depth-first search algorithm (aka path sensitive, one path traversed at a time)

Authors

  • Sophia D'Antoine
  • Ryan Stortz