Security_Guy

Radare was initially developed as a forensic tool. Nowadays most people use it for static code analysis or binary patching, but the framework and the tools still provide functionalities for analyzing disk partitions or filesystems.. In this post I’m going to explain how to use r2 to extract some ELFs…

As announced, the Radare Summer of Code is starting today! If you’re an applicant, please keep us up to date about what you’re working on. If you’re a mentor, please help applicants you’re in charge of. If you’re curious about what the RSoC is, please check this page. If you…

When in doubt, it’s a tout Robust Operational Security Practices Aren’t Enough A British man, Lauri Love, has been indicted for hacking. The indictment is thin on details, but does have some interesting OPSEC insights that can be teased out by the patient reader. The indictment of Lauri Love doesn’t…

Everyone knows IDA and Ollydbg, but not everyone has 2700€ to spend on a software, nor wants to trust/use closed-source applications. But who uses radare2 as a replacement ? Cool projects Some reverse-engineering/security-oriented projects are using radare2, thanks to its convenient license (GPL/LGPL). some coreboot developers are using radare2, since…

This past friday I checked out the gnutls repository and noticed a commit done two weeks ago: 2014-05-23 19:50 Nikos Mavrogiannopoulos <[email protected]> Prevent memory corruption due to server hello parsing. The patch adds a second check to verify the boundary of the session id size. - if (len < session_id_len)…