Site updated: 2019-07-09 14:49:41

This commit is contained in:
Cool-Y 2019-07-09 14:49:56 +08:00
parent b4370ba2bf
commit aa080f69a2
82 changed files with 2387 additions and 498 deletions

View File

@ -558,7 +558,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -651,7 +651,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -730,7 +730,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -839,7 +839,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -632,7 +632,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -741,7 +741,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -632,7 +632,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -741,7 +741,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -637,7 +637,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -746,7 +746,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -760,7 +760,7 @@ Server -------wire----------|
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -869,7 +869,7 @@ Server -------wire----------|
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -609,7 +609,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -718,7 +718,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -616,7 +616,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -725,7 +725,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -626,7 +626,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -735,7 +735,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -651,7 +651,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -760,7 +760,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -754,7 +754,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -863,7 +863,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -675,7 +675,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -784,7 +784,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -798,7 +798,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -907,7 +907,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -630,8 +630,8 @@
<div class="post-nav-prev post-nav-item">
<a href="/2019/05/14/pack-and-unpack/" rel="prev" title="pack and unpack">
pack and unpack <i class="fa fa-chevron-right"></i>
<a href="/2019/05/14/pack-and-unpack/" rel="prev" title="加壳与脱壳">
加壳与脱壳 <i class="fa fa-chevron-right"></i>
</a>
</div>
@ -718,7 +718,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -827,7 +827,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -81,7 +81,7 @@
<meta name="description" content="壳是最早出现的一种专用加密软件技术。一些软件会采取加壳保护的方式。壳附加在原始程序上通过Windows加载器载入内存后先于原始程序执行以得到控制权在执行的过程中对原始程序进行解密还原然后把控制权还给原始程序执行原来的代码。加上外壳后原始程序在磁盘文件中一般是以加密后的形式存在的只在执行时在内存中还原。这样可以有效防止破解者对程序文件进行非法修改也可以防止程序被静态反编译。 壳的加">
<meta property="og:type" content="article">
<meta property="og:title" content="pack and unpack">
<meta property="og:title" content="加壳与脱壳">
<meta property="og:url" content="https://cool-y.github.io/2019/05/14/pack-and-unpack/index.html">
<meta property="og:site_name" content="混元霹雳手">
<meta property="og:description" content="壳是最早出现的一种专用加密软件技术。一些软件会采取加壳保护的方式。壳附加在原始程序上通过Windows加载器载入内存后先于原始程序执行以得到控制权在执行的过程中对原始程序进行解密还原然后把控制权还给原始程序执行原来的代码。加上外壳后原始程序在磁盘文件中一般是以加密后的形式存在的只在执行时在内存中还原。这样可以有效防止破解者对程序文件进行非法修改也可以防止程序被静态反编译。 壳的加">
@ -97,9 +97,9 @@
<meta property="og:image" content="https://res.cloudinary.com/dozyfkbg3/image/upload/v1557837250/%E5%8A%A0%E5%A3%B3/9.png">
<meta property="og:image" content="https://res.cloudinary.com/dozyfkbg3/image/upload/v1557837519/%E5%8A%A0%E5%A3%B3/10.png">
<meta property="og:image" content="https://res.cloudinary.com/dozyfkbg3/image/upload/v1557837859/%E5%8A%A0%E5%A3%B3/11.png">
<meta property="og:updated_time" content="2019-05-18T06:52:27.207Z">
<meta property="og:updated_time" content="2019-07-01T12:04:55.244Z">
<meta name="twitter:card" content="summary">
<meta name="twitter:title" content="pack and unpack">
<meta name="twitter:title" content="加壳与脱壳">
<meta name="twitter:description" content="壳是最早出现的一种专用加密软件技术。一些软件会采取加壳保护的方式。壳附加在原始程序上通过Windows加载器载入内存后先于原始程序执行以得到控制权在执行的过程中对原始程序进行解密还原然后把控制权还给原始程序执行原来的代码。加上外壳后原始程序在磁盘文件中一般是以加密后的形式存在的只在执行时在内存中还原。这样可以有效防止破解者对程序文件进行非法修改也可以防止程序被静态反编译。 壳的加">
<meta name="twitter:image" content="https://res.cloudinary.com/dozyfkbg3/image/upload/v1557817831/%E5%8A%A0%E5%A3%B3/1.png">
@ -137,7 +137,7 @@
<title>pack and unpack | 混元霹雳手</title>
<title>加壳与脱壳 | 混元霹雳手</title>
@ -333,7 +333,7 @@
<h1 class="post-title" itemprop="name headline">pack and unpack</h1>
<h1 class="post-title" itemprop="name headline">加壳与脱壳</h1>
<div class="post-meta">
@ -373,7 +373,7 @@
<span id="/2019/05/14/pack-and-unpack/" class="leancloud_visitors" data-flag-title="pack and unpack">
<span id="/2019/05/14/pack-and-unpack/" class="leancloud_visitors" data-flag-title="加壳与脱壳">
<span class="post-meta-divider">|</span>
<span class="post-meta-item-icon">
<i class="fa fa-eye"></i>
@ -640,7 +640,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -749,7 +749,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -89,7 +89,7 @@
<meta property="og:locale" content="zh-Hans">
<meta property="og:image" content="https://image.3001.net/images/20181207/1544168163_5c0a22e3eedce.jpg">
<meta property="og:image" content="http://lcamtuf.coredump.cx/afl/afl_gzip.png">
<meta property="og:updated_time" content="2019-07-01T12:00:47.564Z">
<meta property="og:updated_time" content="2019-07-08T06:09:11.627Z">
<meta name="twitter:card" content="summary">
<meta name="twitter:title" content="AFL初探">
<meta name="twitter:description" content="接触这个词语已经有一年了但还没有学习过更没有上手实践过正好趁这个机会好好弄弄AFL。提起模糊测试我们总会联想起这样或那样的专业术语——测试用例、代码覆盖率、执行路径等等你可能和我一样一头雾水这次我们就来看个明白 0x01 模糊测试首先模糊测试Fuzzing是一种测试手段它把系统看成一个摸不清内部结构的黑盒只是向其输入接口随机地发送合法测试用例这些用例并不是开发者所预期的输入">
@ -410,7 +410,7 @@
</span>
<span title="字数统计">
11.3k 字
11.4k 字
</span>
@ -479,7 +479,7 @@
<hr>
<h1 id="0x02-AFL快速入门"><a href="#0x02-AFL快速入门" class="headerlink" title="0x02 AFL快速入门"></a>0x02 <a href="http://lcamtuf.coredump.cx/afl/QuickStartGuide.txt" target="_blank" rel="noopener">AFL快速入门</a></h1><p>1<code>make</code>编译AFL。如果构建失败请参阅docs / INSTALL以获取提示。<br>2查找或编写一个相当快速和简单的程序该程序从文件或标准输入中获取数据以一种有价值的方式处理它然后干净地退出。如果测试网络服务请将其修改为在前台运行并从stdin读取。在对使用校验和的格式进行模糊测试时也要注释掉校验和验证码。<br>遇到故障时程序必须正常崩溃。注意自定义SIGSEGV或SIGABRT处理程序和后台进程。有关检测非崩溃缺陷的提示请参阅docs/README中的第11节。<br>3使用afl-gcc编译要模糊的程序/库。一种常见的方法是:<br><figure class="highlight plain"><table><tr><td class="gutter"><pre><span class="line">1</span><br></pre></td><td class="code"><pre><span class="line">CC = / path / to / afl-gcc CXX = / path / to / afl-g ++ ./configure --disable shared make clean all</span><br></pre></td></tr></table></figure></p>
<p>如果程序构建失败,请联系 <a href="mailto:&#x61;&#102;&#x6c;&#45;&#117;&#115;&#101;&#114;&#x73;&#64;&#103;&#111;&#x6f;&#103;&#108;&#101;&#x67;&#x72;&#111;&#x75;&#112;&#115;&#46;&#x63;&#111;&#109;" target="_blank" rel="noopener">&#x61;&#102;&#x6c;&#45;&#117;&#115;&#101;&#114;&#x73;&#64;&#103;&#111;&#x6f;&#103;&#108;&#101;&#x67;&#x72;&#111;&#x75;&#112;&#115;&#46;&#x63;&#111;&#109;</a><br>4获取一个对程序有意义的小而有效的输入文件。在模糊详细语法SQLHTTP等也要创建字典如dictionaries/README.dictionaries中所述。<br>5如果程序从stdin读取则运行afl-fuzz如下所示<br><code>./afl-fuzz -i testcase_dir -o findings_dir -- \ /path/to/tested/program [... program&#39;s cmdline ...]</code><br> 如果程序从文件中获取输入,则可以在程序的命令行中输入@@; AFL会为您放置一个自动生成的文件名。</p>
<p>如果程序构建失败,请联系 <a href="mailto:&#x61;&#x66;&#x6c;&#45;&#117;&#115;&#x65;&#114;&#115;&#64;&#x67;&#x6f;&#x6f;&#x67;&#x6c;&#x65;&#103;&#x72;&#x6f;&#117;&#x70;&#115;&#x2e;&#99;&#x6f;&#x6d;" target="_blank" rel="noopener">&#x61;&#x66;&#x6c;&#45;&#117;&#115;&#x65;&#114;&#115;&#64;&#x67;&#x6f;&#x6f;&#x67;&#x6c;&#x65;&#103;&#x72;&#x6f;&#117;&#x70;&#115;&#x2e;&#99;&#x6f;&#x6d;</a><br>4获取一个对程序有意义的小而有效的输入文件。在模糊详细语法SQLHTTP等也要创建字典如dictionaries/README.dictionaries中所述。<br>5如果程序从stdin读取则运行afl-fuzz如下所示<br><code>./afl-fuzz -i testcase_dir -o findings_dir -- \ /path/to/tested/program [... program&#39;s cmdline ...]</code><br> 如果程序从文件中获取输入,则可以在程序的命令行中输入@@; AFL会为您放置一个自动生成的文件名。</p>
<p><strong>一些参考文档</strong></p>
<blockquote>
<p><a href="http://lcamtuf.coredump.cx/afl/README.txt" target="_blank" rel="noopener">docs/README</a> - AFL的一般介绍<br><a href="https://github.com/mirrorer/afl/blob/master/docs/perf_tips.txt" target="_blank" rel="noopener">docs/perf_tips.txt</a> - 关于如何快速模糊的简单提示,<br><a href="http://lcamtuf.coredump.cx/afl/status_screen.txt" target="_blank" rel="noopener">docs/status_screen.txt</a> - UI中显示的花絮的解释<br><a href="https://github.com/mirrorer/afl/blob/master/docs/parallel_fuzzing.txt" target="_blank" rel="noopener">docs/parallel_fuzzing.txt</a> - 关于在多个核上运行AFL的建议<br><a href="http://lcamtuf.coredump.cx/afl/demo/" target="_blank" rel="noopener">Generated test cases for common image formats</a> - 生成图像文件测试用例的demo<br><a href="http://lcamtuf.coredump.cx/afl/technical_details.txt" target="_blank" rel="noopener">Technical “whitepaper” for afl-fuzz</a> - 技术白皮书</p>
@ -496,10 +496,10 @@
</ol>
<hr>
<h1 id="0x04-AFL-README"><a href="#0x04-AFL-README" class="headerlink" title="0x04 AFL README"></a>0x04 <a href="http://lcamtuf.coredump.cx/afl/README.txt" target="_blank" rel="noopener">AFL README</a></h1><blockquote>
<p>Written and maintained by Michal Zalewski <a href="mailto:&#x6c;&#99;&#97;&#x6d;&#116;&#x75;&#102;&#64;&#x67;&#111;&#x6f;&#x67;&#108;&#x65;&#46;&#x63;&#x6f;&#x6d;" target="_blank" rel="noopener">&#x6c;&#99;&#97;&#x6d;&#116;&#x75;&#102;&#64;&#x67;&#111;&#x6f;&#x67;&#108;&#x65;&#46;&#x63;&#x6f;&#x6d;</a></p>
<p>Written and maintained by Michal Zalewski <a href="mailto:&#x6c;&#x63;&#x61;&#x6d;&#116;&#117;&#102;&#64;&#103;&#111;&#111;&#103;&#x6c;&#x65;&#x2e;&#99;&#111;&#109;" target="_blank" rel="noopener">&#x6c;&#x63;&#x61;&#x6d;&#116;&#117;&#102;&#64;&#103;&#111;&#111;&#103;&#x6c;&#x65;&#x2e;&#99;&#111;&#109;</a></p>
<p> Copyright 2013, 2014, 2015, 2016 Google Inc. All rights reserved.<br> Released under terms and conditions of Apache License, Version 2.0.</p>
<p> For new versions and additional information, check out:<br> <a href="http://lcamtuf.coredump.cx/afl/" target="_blank" rel="noopener">http://lcamtuf.coredump.cx/afl/</a></p>
<p> To compare notes with other users or get notified about major new features,<br> send a mail to <a href="mailto:&#97;&#x66;&#x6c;&#x2d;&#x75;&#115;&#x65;&#114;&#x73;&#43;&#x73;&#117;&#x62;&#115;&#99;&#x72;&#105;&#x62;&#101;&#x40;&#103;&#x6f;&#x6f;&#103;&#x6c;&#x65;&#103;&#x72;&#x6f;&#117;&#112;&#115;&#46;&#99;&#x6f;&#109;" target="_blank" rel="noopener">&#97;&#x66;&#x6c;&#x2d;&#x75;&#115;&#x65;&#114;&#x73;&#43;&#x73;&#117;&#x62;&#115;&#99;&#x72;&#105;&#x62;&#101;&#x40;&#103;&#x6f;&#x6f;&#103;&#x6c;&#x65;&#103;&#x72;&#x6f;&#117;&#112;&#115;&#46;&#99;&#x6f;&#109;</a>.</p>
<p> To compare notes with other users or get notified about major new features,<br> send a mail to <a href="mailto:&#x61;&#x66;&#108;&#45;&#x75;&#x73;&#101;&#x72;&#x73;&#43;&#115;&#117;&#x62;&#x73;&#99;&#x72;&#105;&#x62;&#101;&#64;&#x67;&#x6f;&#111;&#103;&#x6c;&#101;&#103;&#114;&#111;&#x75;&#112;&#115;&#x2e;&#99;&#x6f;&#x6d;" target="_blank" rel="noopener">&#x61;&#x66;&#108;&#45;&#x75;&#x73;&#101;&#x72;&#x73;&#43;&#115;&#117;&#x62;&#x73;&#99;&#x72;&#105;&#x62;&#101;&#64;&#x67;&#x6f;&#111;&#103;&#x6c;&#101;&#103;&#114;&#111;&#x75;&#112;&#115;&#x2e;&#99;&#x6f;&#x6d;</a>.</p>
<p> <strong>See QuickStartGuide.txt if you dont have time to read this file.</strong></p>
</blockquote>
<h2 id="1具有导向性的模糊测试的挑战"><a href="#1具有导向性的模糊测试的挑战" class="headerlink" title="1具有导向性的模糊测试的挑战"></a>1具有导向性的模糊测试的挑战</h2><p>Fuzzing是用于识别真实软件中的安全问题的最强大且经过验证的策略之一;它负责安全关键软件中迄今为止发现的绝大多数远程代码执行和权限提升漏洞。<br>不幸的是,模糊测试也不够有力。盲目的、随机的变异使得它不太可能在测试代码中达到某些代码路径,从而使一些漏洞超出了这种技术的范围。<br>已经有许多尝试来解决这个问题。早期方法之一 - 由Tavis Ormandy开创 - 是一种语义库蒸馏corpus distillation。网上找到的一些大型语料库中往往包含大量的文件这时就需要对其精简该方法依赖于覆盖信号从大量高质量的候选文件语料库中选择有趣种子的子集然后通过传统方式对其进行模糊处理。该方法非常有效但需要这样的语料库随时可用。正因为如此代码覆盖率也只是衡量程序执行状态的一个简单化的度量这种方式并不适合后续引导fuzzing测试的。<br>其他更复杂的研究集中在诸如程序流分析“concoic execution”符号执行或静态分析等技术上。所有这些方法在实验环境中都非常有前景但在实际应用中往往会遇到可靠性和性能问题 - 部分高价值的程序都有非常复杂的内部状态和执行路径在这一方面符号执行和concolic技术往往会显得不够健壮如路径爆炸问题所以仍然稍逊于传统的fuzzing技术。</p>
@ -571,7 +571,7 @@
<h1 id="0x05-afl-fuzz白皮书"><a href="#0x05-afl-fuzz白皮书" class="headerlink" title="0x05 afl-fuzz白皮书"></a>0x05 <a href="http://lcamtuf.coredump.cx/afl/technical_details.txt" target="_blank" rel="noopener">afl-fuzz白皮书</a></h1><p>本文档提供了American Fuzzy Lop的简单的概述。想了解一般的使用说明请参见README 。想了解AFL背后的动机和设计目标请参见<a href="http://lcamtuf.coredump.cx/afl/historical_notes.txt" target="_blank" rel="noopener">historical_notes.txt</a></p>
<h2 id="0设计说明-Design-statement"><a href="#0设计说明-Design-statement" class="headerlink" title="0设计说明(Design statement)"></a>0设计说明(Design statement)</h2><p>American Fuzzy Lop 不关注任何单一的操作规则(singular principle of<br>operation),也不是一个针对任何特定理论的概念验证(proof of concept)。这个工具可以被认为是一系列在实践中测试过的hacks行为我们发现这个工具惊人的有效。我们用目前最simple且最robust的方法实现了这个工具。<br>唯一的设计宗旨在于速度、可靠性和易用性。</p>
<h2 id="1覆盖率计算-Coverage-measurements"><a href="#1覆盖率计算-Coverage-measurements" class="headerlink" title="1覆盖率计算(Coverage measurements)"></a>1覆盖率计算(Coverage measurements)</h2><p>在编译过的程序中插桩能够捕获分支(边缘)的覆盖率,并且还能检测到粗略的分支执行命中次数(branch-taken hit counts)。在分支点注入的代码大致如下:</p>
<figure class="highlight plain"><table><tr><td class="gutter"><pre><span class="line">1</span><br><span class="line">2</span><br><span class="line">3</span><br></pre></td><td class="code"><pre><span class="line">cur_location = &lt;COMPILE_TIME_RANDOM&gt;;</span><br><span class="line">shared_mem[cur_location ^ prev_location]++;</span><br><span class="line">prev_location = cur_location &gt;&gt; 1;</span><br></pre></td></tr></table></figure>
<figure class="highlight plain"><table><tr><td class="gutter"><pre><span class="line">1</span><br><span class="line">2</span><br><span class="line">3</span><br></pre></td><td class="code"><pre><span class="line">cur_location = &lt;COMPILE_TIME_RANDOM&gt;; //用一个随机数标记当前基本块</span><br><span class="line">shared_mem[cur_location ^ prev_location]++; //将当前块和前一块异或保存到shared_mem[]</span><br><span class="line">prev_location = cur_location &gt;&gt; 1; //cur_location右移1位区分从当前块到当前块的转跳</span><br></pre></td></tr></table></figure>
<p>cur_location的值是随机产生的为的是简化连接复杂对象的过程和保持XOR输出分布是均匀的。<br>shared_mem[] 数组是一个调用者 (caller) 传给被插桩的二进制程序的64kB的共享空间。其中的每一字节可以理解成对于插桩代码中特别的元组(branch_src, branch_dst)的一次命中hit<br>选择这个数组大小的原因是让冲突(collisions)尽可能减少。这样通常能处理2k到10k的分支点。同时它的大小也足以使输出图能在接受端达到毫秒级的分析。</p>
<table>
<thead>
@ -617,7 +617,7 @@
<p>这种形式的覆盖率,相对于简单的基本块覆盖率来说,对程序运行路径提供了一个更好的描述(insight)。特别地,它能很好地区分以下两个执行路径:</p>
<blockquote>
<p> A -&gt; B -&gt; C -&gt; D -&gt; E (tuples: AB, BC, CD, DE)<br> A -&gt; B -&gt; D -&gt; C -&gt; E (tuples: AB, BD, DC, CE)</p>
<p>这有助于发现底层代码的微小错误条件。因为安全漏洞通常是一些非预期(或不正确)的语句转移(一个tuple就是一个语句转移),而不是没覆盖到某块代码。<br>上边伪代码的最后一行移位操作是为了让tuple具有定向性(没有这一行的话A^B和B^A就没区别了同样A^A和B^B也没区别了)。采用移的原因跟Intel CPU的一些特性有关。</p>
<p>这有助于发现底层代码的微小错误条件。因为安全漏洞通常是一些非预期(或不正确)的语句转移(一个tuple就是一个语句转移),而不是没覆盖到某块代码。<br>上边伪代码的最后一行移位操作是为了让tuple具有定向性(没有这一行的话A^B和B^A就没区别了同样A^A和B^B也没区别了)。采用移的原因跟Intel CPU的一些特性有关。</p>
</blockquote>
<h2 id="2发现新路径-Detecting-new-behaviors"><a href="#2发现新路径-Detecting-new-behaviors" class="headerlink" title="2发现新路径(Detecting new behaviors)"></a>2发现新路径(Detecting new behaviors)</h2><p>AFL的fuzzers使用一个<strong>全局Map</strong>来存储之前执行时看到的tuple。这些数据可以被用来对不同的trace进行快速对比从而可以计算出是否新执行了一个dword指令/一个qword-wide指令/一个简单的循环。<br>当一个变异的输入产生了一个包含新tuple的执行路径时对应的输入文件就被保存然后被发送到下一过程(见第3部分)。对于那些没有产生新路径的输入就算他们的instrumentation输出模式是不同的也会被抛弃掉。<br>这种算法考虑了一个非常细粒度的、长期的对程序状态的探索,同时它还不必执行复杂的计算,不必对整个复杂的执行流进行对比,也避免了路径爆炸的影响。<br>为了说明这个算法是怎么工作的考虑下面的两个路径第二个路径出现了新的tuples(CA, AE):<br><figure class="highlight plain"><table><tr><td class="gutter"><pre><span class="line">1</span><br><span class="line">2</span><br></pre></td><td class="code"><pre><span class="line">#1: A -&gt; B -&gt; C -&gt; D -&gt; E</span><br><span class="line">#2: A -&gt; B -&gt; C -&gt; A -&gt; E</span><br></pre></td></tr></table></figure></p>
<p>因为#2的原因以下的路径就不认为是不同的路径了尽管看起来非常不同<br><code>#3: A -&gt; B -&gt; C -&gt; A -&gt; B -&gt; C -&gt; A -&gt; B -&gt; C -&gt; D -&gt; E</code></p>
@ -816,8 +816,8 @@
<div class="post-nav">
<div class="post-nav-next post-nav-item">
<a href="/2019/05/14/pack-and-unpack/" rel="next" title="pack and unpack">
<i class="fa fa-chevron-left"></i> pack and unpack
<a href="/2019/05/14/pack-and-unpack/" rel="next" title="加壳与脱壳">
<i class="fa fa-chevron-left"></i> 加壳与脱壳
</a>
</div>
@ -826,6 +826,10 @@
<div class="post-nav-prev post-nav-item">
<a href="/2019/07/09/afl-first-try/" rel="prev" title="AFL初次实践">
AFL初次实践 <i class="fa fa-chevron-right"></i>
</a>
</div>
</div>
@ -910,7 +914,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -1019,7 +1023,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

File diff suppressed because it is too large Load Diff

View File

@ -367,7 +367,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -460,7 +460,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -299,7 +299,7 @@
嗯..! 目前共计 16 篇日志。 继续努力。
嗯..! 目前共计 17 篇日志。 继续努力。
</span>
@ -397,7 +397,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -490,7 +490,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -299,7 +299,7 @@
嗯..! 目前共计 16 篇日志。 继续努力。
嗯..! 目前共计 17 篇日志。 继续努力。
</span>
@ -397,7 +397,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -490,7 +490,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -299,7 +299,7 @@
嗯..! 目前共计 16 篇日志。 继续努力。
嗯..! 目前共计 17 篇日志。 继续努力。
</span>
@ -397,7 +397,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -490,7 +490,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -299,7 +299,7 @@
嗯..! 目前共计 16 篇日志。 继续努力。
嗯..! 目前共计 17 篇日志。 继续努力。
</span>
@ -467,7 +467,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -560,7 +560,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -299,7 +299,7 @@
嗯..! 目前共计 16 篇日志。 继续努力。
嗯..! 目前共计 17 篇日志。 继续努力。
</span>
@ -502,7 +502,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -595,7 +595,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -299,7 +299,7 @@
嗯..! 目前共计 16 篇日志。 继续努力。
嗯..! 目前共计 17 篇日志。 继续努力。
</span>
@ -397,7 +397,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -490,7 +490,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -299,7 +299,7 @@
嗯..! 目前共计 16 篇日志。 继续努力。
嗯..! 目前共计 17 篇日志。 继续努力。
</span>
@ -397,7 +397,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -490,7 +490,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -299,7 +299,7 @@
嗯..! 目前共计 16 篇日志。 继续努力。
嗯..! 目前共计 17 篇日志。 继续努力。
</span>
@ -502,7 +502,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -595,7 +595,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -299,7 +299,7 @@
嗯..! 目前共计 16 篇日志。 继续努力。
嗯..! 目前共计 17 篇日志。 继续努力。
</span>
@ -432,7 +432,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -525,7 +525,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -299,7 +299,7 @@
嗯..! 目前共计 16 篇日志。 继续努力。
嗯..! 目前共计 17 篇日志。 继续努力。
</span>
@ -325,7 +325,7 @@
<a class="post-title-link" href="/2019/05/14/pack-and-unpack/" itemprop="url">
<span itemprop="name">pack and unpack</span>
<span itemprop="name">加壳与脱壳</span>
</a>
@ -432,7 +432,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -525,7 +525,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -299,7 +299,7 @@
嗯..! 目前共计 16 篇日志。 继续努力。
嗯..! 目前共计 17 篇日志。 继续努力。
</span>
@ -318,6 +318,41 @@
<article class="post post-type-normal" itemscope itemtype="http://schema.org/Article">
<header class="post-header">
<h2 class="post-title">
<a class="post-title-link" href="/2019/07/09/afl-first-try/" itemprop="url">
<span itemprop="name">AFL初次实践</span>
</a>
</h2>
<div class="post-meta">
<time class="post-time" itemprop="dateCreated" datetime="2019-07-09T14:46:07+08:00" content="2019-07-09">
07-09
</time>
</div>
</header>
</article>
<article class="post post-type-normal" itemscope itemtype="http://schema.org/Article">
<header class="post-header">
@ -397,7 +432,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -490,7 +525,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -299,7 +299,7 @@
嗯..! 目前共计 16 篇日志。 继续努力。
嗯..! 目前共计 17 篇日志。 继续努力。
</span>
@ -318,6 +318,41 @@
<article class="post post-type-normal" itemscope itemtype="http://schema.org/Article">
<header class="post-header">
<h2 class="post-title">
<a class="post-title-link" href="/2019/07/09/afl-first-try/" itemprop="url">
<span itemprop="name">AFL初次实践</span>
</a>
</h2>
<div class="post-meta">
<time class="post-time" itemprop="dateCreated" datetime="2019-07-09T14:46:07+08:00" content="2019-07-09">
07-09
</time>
</div>
</header>
</article>
<article class="post post-type-normal" itemscope itemtype="http://schema.org/Article">
<header class="post-header">
@ -360,7 +395,7 @@
<a class="post-title-link" href="/2019/05/14/pack-and-unpack/" itemprop="url">
<span itemprop="name">pack and unpack</span>
<span itemprop="name">加壳与脱壳</span>
</a>
@ -624,41 +659,6 @@
<article class="post post-type-normal" itemscope itemtype="http://schema.org/Article">
<header class="post-header">
<h2 class="post-title">
<a class="post-title-link" href="/2019/02/22/qq数据库的加密解密/" itemprop="url">
<span itemprop="name">QQ数据库的加密与解密</span>
</a>
</h2>
<div class="post-meta">
<time class="post-time" itemprop="dateCreated" datetime="2019-02-22T18:35:27+08:00" content="2019-02-22">
02-22
</time>
</div>
</header>
</article>
</div>
</div>
@ -716,7 +716,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -809,7 +809,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -299,7 +299,7 @@
嗯..! 目前共计 16 篇日志。 继续努力。
嗯..! 目前共计 17 篇日志。 继续努力。
</span>
@ -318,6 +318,41 @@
<article class="post post-type-normal" itemscope itemtype="http://schema.org/Article">
<header class="post-header">
<h2 class="post-title">
<a class="post-title-link" href="/2019/02/22/qq数据库的加密解密/" itemprop="url">
<span itemprop="name">QQ数据库的加密与解密</span>
</a>
</h2>
<div class="post-meta">
<time class="post-time" itemprop="dateCreated" datetime="2019-02-22T18:35:27+08:00" content="2019-02-22">
02-22
</time>
</div>
</header>
</article>
<article class="post post-type-normal" itemscope itemtype="http://schema.org/Article">
<header class="post-header">
@ -401,7 +436,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -494,7 +529,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -299,7 +299,7 @@
嗯..! 目前共计 16 篇日志。 继续努力。
嗯..! 目前共计 17 篇日志。 继续努力。
</span>
@ -318,6 +318,41 @@
<article class="post post-type-normal" itemscope itemtype="http://schema.org/Article">
<header class="post-header">
<h2 class="post-title">
<a class="post-title-link" href="/2019/07/09/afl-first-try/" itemprop="url">
<span itemprop="name">AFL初次实践</span>
</a>
</h2>
<div class="post-meta">
<time class="post-time" itemprop="dateCreated" datetime="2019-07-09T14:46:07+08:00" content="2019-07-09">
07-09
</time>
</div>
</header>
</article>
<article class="post post-type-normal" itemscope itemtype="http://schema.org/Article">
<header class="post-header">
@ -360,7 +395,7 @@
<a class="post-title-link" href="/2019/05/14/pack-and-unpack/" itemprop="url">
<span itemprop="name">pack and unpack</span>
<span itemprop="name">加壳与脱壳</span>
</a>
@ -624,41 +659,6 @@
<article class="post post-type-normal" itemscope itemtype="http://schema.org/Article">
<header class="post-header">
<h2 class="post-title">
<a class="post-title-link" href="/2019/02/22/qq数据库的加密解密/" itemprop="url">
<span itemprop="name">QQ数据库的加密与解密</span>
</a>
</h2>
<div class="post-meta">
<time class="post-time" itemprop="dateCreated" datetime="2019-02-22T18:35:27+08:00" content="2019-02-22">
02-22
</time>
</div>
</header>
</article>
</div>
</div>
@ -716,7 +716,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -809,7 +809,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -299,7 +299,7 @@
嗯..! 目前共计 16 篇日志。 继续努力。
嗯..! 目前共计 17 篇日志。 继续努力。
</span>
@ -318,6 +318,41 @@
<article class="post post-type-normal" itemscope itemtype="http://schema.org/Article">
<header class="post-header">
<h2 class="post-title">
<a class="post-title-link" href="/2019/02/22/qq数据库的加密解密/" itemprop="url">
<span itemprop="name">QQ数据库的加密与解密</span>
</a>
</h2>
<div class="post-meta">
<time class="post-time" itemprop="dateCreated" datetime="2019-02-22T18:35:27+08:00" content="2019-02-22">
02-22
</time>
</div>
</header>
</article>
<article class="post post-type-normal" itemscope itemtype="http://schema.org/Article">
<header class="post-header">
@ -586,7 +621,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -679,7 +714,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -1,5 +1,5 @@
https://cool-y.github.io/2019/07/09/afl-first-try/
https://cool-y.github.io/2019/07/01/AFL-first-learn/
https://cool-y.github.io/2019/05/14/pack-and-unpack/
https://cool-y.github.io/2019/05/13/PE-file/
https://cool-y.github.io/2019/04/21/XIAOMI-UPnP/
https://cool-y.github.io/2019/04/15/Caving-db-storage/

View File

@ -1,14 +1,17 @@
<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://cool-y.github.io/2019/07/09/afl-first-try/</loc>
<lastmod>2019-07-09</lastmod>
</url> <url>
<loc>https://cool-y.github.io/2019/07/01/AFL-first-learn/</loc>
<lastmod>2019-07-08</lastmod>
</url> <url>
<loc>https://cool-y.github.io/2019/05/14/pack-and-unpack/</loc>
<lastmod>2019-07-01</lastmod>
</url> <url>
<loc>https://cool-y.github.io/2018/12/25/TCPDUMP%E6%8B%92%E7%BB%9D%E6%9C%8D%E5%8A%A1%E6%94%BB%E5%87%BB%E6%BC%8F%E6%B4%9E/</loc>
<lastmod>2019-07-01</lastmod>
</url> <url>
<loc>https://cool-y.github.io/2019/05/14/pack-and-unpack/</loc>
<lastmod>2019-05-18</lastmod>
</url> <url>
<loc>https://cool-y.github.io/2019/05/13/PE-file/</loc>
<lastmod>2019-05-13</lastmod>
@ -28,10 +31,10 @@
<loc>https://cool-y.github.io/2018/12/23/%E5%9F%BA%E4%BA%8E%E8%A7%84%E5%88%99%E5%BC%95%E6%93%8E%E5%8F%91%E7%8E%B0IOT%E8%AE%BE%E5%A4%87/</loc>
<lastmod>2019-04-15</lastmod>
</url> <url>
<loc>https://cool-y.github.io/2019/02/22/qq%E6%95%B0%E6%8D%AE%E5%BA%93%E7%9A%84%E5%8A%A0%E5%AF%86%E8%A7%A3%E5%AF%86/</loc>
<loc>https://cool-y.github.io/2019/01/16/wifi%E5%8D%8A%E5%8F%8C%E5%B7%A5%E4%BE%A7%E4%BF%A1%E9%81%93%E6%94%BB%E5%87%BB%E5%AD%A6%E4%B9%A0%E7%AC%94%E8%AE%B0/</loc>
<lastmod>2019-04-15</lastmod>
</url> <url>
<loc>https://cool-y.github.io/2019/01/16/wifi%E5%8D%8A%E5%8F%8C%E5%B7%A5%E4%BE%A7%E4%BF%A1%E9%81%93%E6%94%BB%E5%87%BB%E5%AD%A6%E4%B9%A0%E7%AC%94%E8%AE%B0/</loc>
<loc>https://cool-y.github.io/2019/02/22/qq%E6%95%B0%E6%8D%AE%E5%BA%93%E7%9A%84%E5%8A%A0%E5%AF%86%E8%A7%A3%E5%AF%86/</loc>
<lastmod>2019-04-15</lastmod>
</url> <url>
<loc>https://cool-y.github.io/2018/12/15/miio-control/</loc>

View File

@ -86,7 +86,7 @@
<meta property="og:site_name" content="混元霹雳手">
<meta property="og:description" content="将常用的一些网站汇总在此,便于浏览和查询 安全博客 360核心安全技术博客 &amp;nbsp;phrake &amp;nbsp; Sec-WIKI &amp;nbsp; 绿盟科技 论坛 看雪 &amp;nbsp;Paper&amp;nbsp; XDA&amp;nbsp; FreeBuf&amp;nbsp; 安全客&amp;nbsp; 吾爱破解&amp;nbsp; 吾爱漏洞&amp;nbsp; 漏洞银行exploit-db CTF CTF领域指南&amp;nbsp; p">
<meta property="og:locale" content="zh-Hans">
<meta property="og:updated_time" content="2019-04-22T11:30:25.896Z">
<meta property="og:updated_time" content="2019-07-01T12:29:27.676Z">
<meta name="twitter:card" content="summary">
<meta name="twitter:title" content="混元霹雳手">
<meta name="twitter:description" content="将常用的一些网站汇总在此,便于浏览和查询 安全博客 360核心安全技术博客 &amp;nbsp;phrake &amp;nbsp; Sec-WIKI &amp;nbsp; 绿盟科技 论坛 看雪 &amp;nbsp;Paper&amp;nbsp; XDA&amp;nbsp; FreeBuf&amp;nbsp; 安全客&amp;nbsp; 吾爱破解&amp;nbsp; 吾爱漏洞&amp;nbsp; 漏洞银行exploit-db CTF CTF领域指南&amp;nbsp; p">
@ -330,7 +330,7 @@
<p><a href="http://codeforces.com/" target="_blank" rel="noopener">codeforces</a>&nbsp; <a href="https://leetcode-cn.com/" target="_blank" rel="noopener">leetcode</a></p>
</blockquote>
<h2 id="工具"><a href="#工具" class="headerlink" title="工具"></a>工具</h2><blockquote>
<p><a href="https://mitmproxy.org/" target="_blank" rel="noopener">mitmproxy</a>&nbsp; <a href="https://www.offensive-security.com/metasploit-unleashed/msfvenom/" target="_blank" rel="noopener">msfvenom</a>&nbsp; <a href="https://github.com/shellphish" target="_blank" rel="noopener">shellphish</a>&nbsp; <a href="https://tools.kali.org/" target="_blank" rel="noopener">KALItools</a></p>
<p><a href="https://mitmproxy.org/" target="_blank" rel="noopener">mitmproxy</a>&nbsp; <a href="https://www.offensive-security.com/metasploit-unleashed/msfvenom/" target="_blank" rel="noopener">msfvenom</a>&nbsp; <a href="https://github.com/shellphish" target="_blank" rel="noopener">shellphish</a>&nbsp; <a href="https://tools.kali.org/" target="_blank" rel="noopener">KALItools</a>&nbsp;<a href="http://www.valgrind.org/" target="_blank" rel="noopener">valgrind-内存泄露扫描利器</a></p>
</blockquote>
<h2 id="资源下载"><a href="#资源下载" class="headerlink" title="资源下载"></a>资源下载</h2><blockquote>
<p><a href="https://emojipedia.org/" target="_blank" rel="noopener">Emoji表情</a>&nbsp; <a href="https://www.apkmirror.com/" target="_blank" rel="noopener">Apk镜像</a></p>
@ -403,7 +403,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -512,7 +512,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -456,7 +456,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -549,7 +549,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -311,7 +311,7 @@
目前共计 6 个分类
</div>
<div class="category-all">
<ul class="category-list"><li class="category-list-item"><a class="category-list-link" href="/categories/IOT/">IOT</a><span class="category-list-count">4</span></li><li class="category-list-item"><a class="category-list-link" href="/categories/二进制/">二进制</a><span class="category-list-count">4</span></li><li class="category-list-item"><a class="category-list-link" href="/categories/加密解密/">加密解密</a><span class="category-list-count">1</span></li><li class="category-list-item"><a class="category-list-link" href="/categories/杂七杂八/">杂七杂八</a><span class="category-list-count">1</span></li><li class="category-list-item"><a class="category-list-link" href="/categories/理论学习/">理论学习</a><span class="category-list-count">1</span></li><li class="category-list-item"><a class="category-list-link" href="/categories/顶会论文/">顶会论文</a><span class="category-list-count">3</span></li></ul>
<ul class="category-list"><li class="category-list-item"><a class="category-list-link" href="/categories/IOT/">IOT</a><span class="category-list-count">4</span></li><li class="category-list-item"><a class="category-list-link" href="/categories/二进制/">二进制</a><span class="category-list-count">5</span></li><li class="category-list-item"><a class="category-list-link" href="/categories/加密解密/">加密解密</a><span class="category-list-count">1</span></li><li class="category-list-item"><a class="category-list-link" href="/categories/杂七杂八/">杂七杂八</a><span class="category-list-count">1</span></li><li class="category-list-item"><a class="category-list-link" href="/categories/理论学习/">理论学习</a><span class="category-list-count">1</span></li><li class="category-list-item"><a class="category-list-link" href="/categories/顶会论文/">顶会论文</a><span class="category-list-count">3</span></li></ul>
</div>
</div>
@ -369,7 +369,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -462,7 +462,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -300,6 +300,32 @@
<article class="post post-type-normal" itemscope itemtype="http://schema.org/Article">
<header class="post-header">
<h2 class="post-title">
<a class="post-title-link" href="/2019/07/09/afl-first-try/" itemprop="url">
<span itemprop="name">AFL初次实践</span>
</a>
</h2>
<div class="post-meta">
<time class="post-time" itemprop="dateCreated" datetime="2019-07-09T14:46:07+08:00" content="2019-07-09">
07-09
</time>
</div>
</header>
</article>
<article class="post post-type-normal" itemscope itemtype="http://schema.org/Article">
<header class="post-header">
@ -456,7 +482,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -549,7 +575,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -378,7 +378,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -471,7 +471,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -378,7 +378,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -471,7 +471,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -378,7 +378,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -471,7 +471,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -430,7 +430,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -523,7 +523,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -1943,7 +1943,7 @@ pre .javascript .function {
width: 4px;
height: 4px;
border-radius: 50%;
background: #fbc9ff;
background: #ffb6ff;
}
.links-of-blogroll {
font-size: 13px;

View File

@ -296,6 +296,195 @@
<article class="post post-type-normal" itemscope itemtype="http://schema.org/Article">
<div class="post-block">
<link itemprop="mainEntityOfPage" href="https://cool-y.github.io/2019/07/09/afl-first-try/">
<span hidden itemprop="author" itemscope itemtype="http://schema.org/Person">
<meta itemprop="name" content="Cool-Y">
<meta itemprop="description" content>
<meta itemprop="image" content="/images/avatar.png">
</span>
<span hidden itemprop="publisher" itemscope itemtype="http://schema.org/Organization">
<meta itemprop="name" content="混元霹雳手">
</span>
<header class="post-header">
<h1 class="post-title" itemprop="name headline">
<a class="post-title-link" href="/2019/07/09/afl-first-try/" itemprop="url">AFL初次实践</a></h1>
<div class="post-meta">
<span class="post-time">
<span class="post-meta-item-icon">
<i class="fa fa-calendar-o"></i>
</span>
<span class="post-meta-item-text">发表于</span>
<time title="创建于" itemprop="dateCreated datePublished" datetime="2019-07-09T14:46:07+08:00">
2019-07-09
</time>
</span>
<span class="post-category">
<span class="post-meta-divider">|</span>
<span class="post-meta-item-icon">
<i class="fa fa-folder-o"></i>
</span>
<span class="post-meta-item-text">分类于</span>
<span itemprop="about" itemscope itemtype="http://schema.org/Thing">
<a href="/categories/二进制/" itemprop="url" rel="index">
<span itemprop="name">二进制</span>
</a>
</span>
</span>
<span id="/2019/07/09/afl-first-try/" class="leancloud_visitors" data-flag-title="AFL初次实践">
<span class="post-meta-divider">|</span>
<span class="post-meta-item-icon">
<i class="fa fa-eye"></i>
</span>
<span class="post-meta-item-text">阅读次数&#58;</span>
<span class="leancloud-visitors-count"></span>
</span>
<div class="post-wordcount">
<span class="post-meta-item-icon">
<i class="fa fa-file-word-o"></i>
</span>
<span title="字数统计">
3.1k 字
</span>
<span class="post-meta-divider">|</span>
<span class="post-meta-item-icon">
<i class="fa fa-clock-o"></i>
</span>
<span title="阅读时长">
15 分钟
</span>
</div>
</div>
</header>
<div class="post-body" itemprop="articleBody">
这篇文章是对afl的简单使用可大致分为黑盒测试和白盒测试两个部分。白盒测试从对目标程序的插桩编译开始然后使用fuzzer对其模糊测试发现崩溃最后对测试的代码覆盖率进行评估。黑盒测试则演示得较简略。参考https://paper.seebug.org/841/#_1
部署afl
123456
...
<!--noindex-->
<div class="post-button text-center">
<a class="btn" href="/2019/07/09/afl-first-try/#more" rel="contents">
阅读全文 &raquo;
</a>
</div>
<!--/noindex-->
</div>
<footer class="post-footer">
<div class="post-eof"></div>
</footer>
</div>
</article>
<article class="post post-type-normal" itemscope itemtype="http://schema.org/Article">
@ -395,7 +584,7 @@
</span>
<span title="字数统计">
11.3k 字
11.4k 字
</span>
@ -508,7 +697,7 @@
<h1 class="post-title" itemprop="name headline">
<a class="post-title-link" href="/2019/05/14/pack-and-unpack/" itemprop="url">pack and unpack</a></h1>
<a class="post-title-link" href="/2019/05/14/pack-and-unpack/" itemprop="url">加壳与脱壳</a></h1>
<div class="post-meta">
@ -538,7 +727,7 @@
<span id="/2019/05/14/pack-and-unpack/" class="leancloud_visitors" data-flag-title="pack and unpack">
<span id="/2019/05/14/pack-and-unpack/" class="leancloud_visitors" data-flag-title="加壳与脱壳">
<span class="post-meta-divider">|</span>
<span class="post-meta-item-icon">
<i class="fa fa-eye"></i>
@ -1967,193 +2156,6 @@ WinDbg
<footer class="post-footer">
<div class="post-eof"></div>
</footer>
</div>
</article>
<article class="post post-type-normal" itemscope itemtype="http://schema.org/Article">
<div class="post-block">
<link itemprop="mainEntityOfPage" href="https://cool-y.github.io/2019/02/22/qq数据库的加密解密/">
<span hidden itemprop="author" itemscope itemtype="http://schema.org/Person">
<meta itemprop="name" content="Cool-Y">
<meta itemprop="description" content>
<meta itemprop="image" content="/images/avatar.png">
</span>
<span hidden itemprop="publisher" itemscope itemtype="http://schema.org/Organization">
<meta itemprop="name" content="混元霹雳手">
</span>
<header class="post-header">
<h1 class="post-title" itemprop="name headline">
<a class="post-title-link" href="/2019/02/22/qq数据库的加密解密/" itemprop="url">QQ数据库的加密与解密</a></h1>
<div class="post-meta">
<span class="post-time">
<span class="post-meta-item-icon">
<i class="fa fa-calendar-o"></i>
</span>
<span class="post-meta-item-text">发表于</span>
<time title="创建于" itemprop="dateCreated datePublished" datetime="2019-02-22T18:35:27+08:00">
2019-02-22
</time>
</span>
<span class="post-category">
<span class="post-meta-divider">|</span>
<span class="post-meta-item-icon">
<i class="fa fa-folder-o"></i>
</span>
<span class="post-meta-item-text">分类于</span>
<span itemprop="about" itemscope itemtype="http://schema.org/Thing">
<a href="/categories/加密解密/" itemprop="url" rel="index">
<span itemprop="name">加密解密</span>
</a>
</span>
</span>
<span id="/2019/02/22/qq数据库的加密解密/" class="leancloud_visitors" data-flag-title="QQ数据库的加密与解密">
<span class="post-meta-divider">|</span>
<span class="post-meta-item-icon">
<i class="fa fa-eye"></i>
</span>
<span class="post-meta-item-text">阅读次数&#58;</span>
<span class="leancloud-visitors-count"></span>
</span>
<div class="post-wordcount">
<span class="post-meta-item-icon">
<i class="fa fa-file-word-o"></i>
</span>
<span title="字数统计">
143 字
</span>
<span class="post-meta-divider">|</span>
<span class="post-meta-item-icon">
<i class="fa fa-clock-o"></i>
</span>
<span title="阅读时长">
1 分钟
</span>
</div>
</div>
</header>
<div class="post-body" itemprop="articleBody">
qq数据库采用简单加密——异或加密数据获取DENGTA_META.xml—IMEI:867179032952446databases/2685371834.db——数据库文件
解密方式明文msg_t 密文msg_Data keyIMEImsg_t = msg_Data[i]^IMEI[i
...
<!--noindex-->
<div class="post-button text-center">
<a class="btn" href="/2019/02/22/qq数据库的加密解密/#more" rel="contents">
阅读全文 &raquo;
</a>
</div>
<!--/noindex-->
</div>
<footer class="post-footer">
@ -2226,7 +2228,7 @@ WinDbg
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -2319,7 +2321,7 @@ WinDbg
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -296,6 +296,193 @@
<article class="post post-type-normal" itemscope itemtype="http://schema.org/Article">
<div class="post-block">
<link itemprop="mainEntityOfPage" href="https://cool-y.github.io/2019/02/22/qq数据库的加密解密/">
<span hidden itemprop="author" itemscope itemtype="http://schema.org/Person">
<meta itemprop="name" content="Cool-Y">
<meta itemprop="description" content>
<meta itemprop="image" content="/images/avatar.png">
</span>
<span hidden itemprop="publisher" itemscope itemtype="http://schema.org/Organization">
<meta itemprop="name" content="混元霹雳手">
</span>
<header class="post-header">
<h1 class="post-title" itemprop="name headline">
<a class="post-title-link" href="/2019/02/22/qq数据库的加密解密/" itemprop="url">QQ数据库的加密与解密</a></h1>
<div class="post-meta">
<span class="post-time">
<span class="post-meta-item-icon">
<i class="fa fa-calendar-o"></i>
</span>
<span class="post-meta-item-text">发表于</span>
<time title="创建于" itemprop="dateCreated datePublished" datetime="2019-02-22T18:35:27+08:00">
2019-02-22
</time>
</span>
<span class="post-category">
<span class="post-meta-divider">|</span>
<span class="post-meta-item-icon">
<i class="fa fa-folder-o"></i>
</span>
<span class="post-meta-item-text">分类于</span>
<span itemprop="about" itemscope itemtype="http://schema.org/Thing">
<a href="/categories/加密解密/" itemprop="url" rel="index">
<span itemprop="name">加密解密</span>
</a>
</span>
</span>
<span id="/2019/02/22/qq数据库的加密解密/" class="leancloud_visitors" data-flag-title="QQ数据库的加密与解密">
<span class="post-meta-divider">|</span>
<span class="post-meta-item-icon">
<i class="fa fa-eye"></i>
</span>
<span class="post-meta-item-text">阅读次数&#58;</span>
<span class="leancloud-visitors-count"></span>
</span>
<div class="post-wordcount">
<span class="post-meta-item-icon">
<i class="fa fa-file-word-o"></i>
</span>
<span title="字数统计">
143 字
</span>
<span class="post-meta-divider">|</span>
<span class="post-meta-item-icon">
<i class="fa fa-clock-o"></i>
</span>
<span title="阅读时长">
1 分钟
</span>
</div>
</div>
</header>
<div class="post-body" itemprop="articleBody">
qq数据库采用简单加密——异或加密数据获取DENGTA_META.xml—IMEI:867179032952446databases/2685371834.db——数据库文件
解密方式明文msg_t 密文msg_Data keyIMEImsg_t = msg_Data[i]^IMEI[i
...
<!--noindex-->
<div class="post-button text-center">
<a class="btn" href="/2019/02/22/qq数据库的加密解密/#more" rel="contents">
阅读全文 &raquo;
</a>
</div>
<!--/noindex-->
</div>
<footer class="post-footer">
<div class="post-eof"></div>
</footer>
</div>
</article>
<article class="post post-type-normal" itemscope itemtype="http://schema.org/Article">
@ -1450,7 +1637,7 @@ ettercap嗅探智能设备和网关之间的流量sudo ettercap -i ens33 -T -q
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -1543,7 +1730,7 @@ ettercap嗅探智能设备和网关之间的流量sudo ettercap -i ens33 -T -q
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

File diff suppressed because one or more lines are too long

View File

@ -1,10 +1,31 @@
<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://cool-y.github.io/2019/07/09/afl-first-try/</loc>
<lastmod>2019-07-09T06:47:08.044Z</lastmod>
</url>
<url>
<loc>https://cool-y.github.io/2019/07/01/AFL-first-learn/</loc>
<lastmod>2019-07-01T12:00:47.564Z</lastmod>
<lastmod>2019-07-08T06:09:11.627Z</lastmod>
</url>
<url>
<loc>https://cool-y.github.io/bookmarks/index.html</loc>
<lastmod>2019-07-01T12:29:27.676Z</lastmod>
</url>
<url>
<loc>https://cool-y.github.io/2019/05/14/pack-and-unpack/</loc>
<lastmod>2019-07-01T12:04:55.244Z</lastmod>
</url>
@ -15,13 +36,6 @@
</url>
<url>
<loc>https://cool-y.github.io/2019/05/14/pack-and-unpack/</loc>
<lastmod>2019-05-18T06:52:27.207Z</lastmod>
</url>
<url>
<loc>https://cool-y.github.io/2019/05/13/PE-file/</loc>
@ -43,13 +57,6 @@
</url>
<url>
<loc>https://cool-y.github.io/bookmarks/index.html</loc>
<lastmod>2019-04-22T11:30:25.896Z</lastmod>
</url>
<url>
<loc>https://cool-y.github.io/2019/04/15/Caving-db-storage/</loc>
@ -86,14 +93,14 @@
</url>
<url>
<loc>https://cool-y.github.io/about/index.html</loc>
<loc>https://cool-y.github.io/2019/03/16/%E5%B0%8F%E7%B1%B3%E5%9B%BA%E4%BB%B6%E5%B7%A5%E5%85%B7mkxqimage/</loc>
<lastmod>2019-04-15T07:35:38.083Z</lastmod>
</url>
<url>
<loc>https://cool-y.github.io/2019/03/16/%E5%B0%8F%E7%B1%B3%E5%9B%BA%E4%BB%B6%E5%B7%A5%E5%85%B7mkxqimage/</loc>
<loc>https://cool-y.github.io/about/index.html</loc>
<lastmod>2019-04-15T07:35:38.083Z</lastmod>
@ -107,14 +114,14 @@
</url>
<url>
<loc>https://cool-y.github.io/2019/02/22/qq%E6%95%B0%E6%8D%AE%E5%BA%93%E7%9A%84%E5%8A%A0%E5%AF%86%E8%A7%A3%E5%AF%86/</loc>
<loc>https://cool-y.github.io/2019/01/16/wifi%E5%8D%8A%E5%8F%8C%E5%B7%A5%E4%BE%A7%E4%BF%A1%E9%81%93%E6%94%BB%E5%87%BB%E5%AD%A6%E4%B9%A0%E7%AC%94%E8%AE%B0/</loc>
<lastmod>2019-04-15T07:35:38.082Z</lastmod>
</url>
<url>
<loc>https://cool-y.github.io/2019/01/16/wifi%E5%8D%8A%E5%8F%8C%E5%B7%A5%E4%BE%A7%E4%BF%A1%E9%81%93%E6%94%BB%E5%87%BB%E5%AD%A6%E4%B9%A0%E7%AC%94%E8%AE%B0/</loc>
<loc>https://cool-y.github.io/2019/02/22/qq%E6%95%B0%E6%8D%AE%E5%BA%93%E7%9A%84%E5%8A%A0%E5%AF%86%E8%A7%A3%E5%AF%86/</loc>
<lastmod>2019-04-15T07:35:38.082Z</lastmod>

View File

@ -300,6 +300,32 @@
<article class="post post-type-normal" itemscope itemtype="http://schema.org/Article">
<header class="post-header">
<h2 class="post-title">
<a class="post-title-link" href="/2019/07/09/afl-first-try/" itemprop="url">
<span itemprop="name">AFL初次实践</span>
</a>
</h2>
<div class="post-meta">
<time class="post-time" itemprop="dateCreated" datetime="2019-07-09T14:46:07+08:00" content="2019-07-09">
07-09
</time>
</div>
</header>
</article>
<article class="post post-type-normal" itemscope itemtype="http://schema.org/Article">
<header class="post-header">
@ -377,7 +403,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -470,7 +496,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -377,7 +377,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -377,7 +377,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -377,7 +377,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -377,7 +377,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -377,7 +377,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -377,7 +377,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -377,7 +377,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -377,7 +377,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -311,7 +311,7 @@
目前共计 33 个标签
</div>
<div class="tag-cloud-tags">
<a href="/tags/AFL/" style="font-size: 12px; color: #ccc">AFL</a> <a href="/tags/CVE/" style="font-size: 12px; color: #ccc">CVE</a> <a href="/tags/MiniUPnP/" style="font-size: 12px; color: #ccc">MiniUPnP</a> <a href="/tags/PE/" style="font-size: 12px; color: #ccc">PE</a> <a href="/tags/QQ/" style="font-size: 12px; color: #ccc">QQ</a> <a href="/tags/SSH/" style="font-size: 12px; color: #ccc">SSH</a> <a href="/tags/Samba/" style="font-size: 12px; color: #ccc">Samba</a> <a href="/tags/TCPDUMP/" style="font-size: 12px; color: #ccc">TCPDUMP</a> <a href="/tags/USENIX/" style="font-size: 12px; color: #ccc">USENIX</a> <a href="/tags/itchat/" style="font-size: 12px; color: #ccc">itchat</a> <a href="/tags/miio/" style="font-size: 12px; color: #ccc">miio</a> <a href="/tags/python/" style="font-size: 12px; color: #ccc">python</a> <a href="/tags/wifi/" style="font-size: 12px; color: #ccc">wifi</a> <a href="/tags/中间人/" style="font-size: 12px; color: #ccc">中间人</a> <a href="/tags/侧信道攻击/" style="font-size: 12px; color: #ccc">侧信道攻击</a> <a href="/tags/取证/" style="font-size: 12px; color: #ccc">取证</a> <a href="/tags/复原文件/" style="font-size: 12px; color: #ccc">复原文件</a> <a href="/tags/密码/" style="font-size: 12px; color: #ccc">密码</a> <a href="/tags/小米/" style="font-size: 30px; color: #111">小米</a> <a href="/tags/微信/" style="font-size: 12px; color: #ccc">微信</a> <a href="/tags/拒绝服务攻击/" style="font-size: 12px; color: #ccc">拒绝服务攻击</a> <a href="/tags/数据库/" style="font-size: 21px; color: #6f6f6f">数据库</a> <a href="/tags/数据挖掘/" style="font-size: 12px; color: #ccc">数据挖掘</a> <a href="/tags/文件格式/" style="font-size: 21px; color: #6f6f6f">文件格式</a> <a href="/tags/模型实现/" style="font-size: 12px; color: #ccc">模型实现</a> <a href="/tags/模糊测试/" style="font-size: 12px; color: #ccc">模糊测试</a> <a href="/tags/破解/" style="font-size: 12px; color: #ccc">破解</a> <a href="/tags/自然语言处理/" style="font-size: 12px; color: #ccc">自然语言处理</a> <a href="/tags/访问控制/" style="font-size: 12px; color: #ccc">访问控制</a> <a href="/tags/路由器/" style="font-size: 12px; color: #ccc">路由器</a> <a href="/tags/远程执行/" style="font-size: 12px; color: #ccc">远程执行</a> <a href="/tags/逆向/" style="font-size: 12px; color: #ccc">逆向</a> <a href="/tags/重放攻击/" style="font-size: 12px; color: #ccc">重放攻击</a>
<a href="/tags/AFL/" style="font-size: 21px; color: #6f6f6f">AFL</a> <a href="/tags/CVE/" style="font-size: 12px; color: #ccc">CVE</a> <a href="/tags/MiniUPnP/" style="font-size: 12px; color: #ccc">MiniUPnP</a> <a href="/tags/PE/" style="font-size: 12px; color: #ccc">PE</a> <a href="/tags/QQ/" style="font-size: 12px; color: #ccc">QQ</a> <a href="/tags/SSH/" style="font-size: 12px; color: #ccc">SSH</a> <a href="/tags/Samba/" style="font-size: 12px; color: #ccc">Samba</a> <a href="/tags/TCPDUMP/" style="font-size: 12px; color: #ccc">TCPDUMP</a> <a href="/tags/USENIX/" style="font-size: 12px; color: #ccc">USENIX</a> <a href="/tags/itchat/" style="font-size: 12px; color: #ccc">itchat</a> <a href="/tags/miio/" style="font-size: 12px; color: #ccc">miio</a> <a href="/tags/python/" style="font-size: 12px; color: #ccc">python</a> <a href="/tags/wifi/" style="font-size: 12px; color: #ccc">wifi</a> <a href="/tags/中间人/" style="font-size: 12px; color: #ccc">中间人</a> <a href="/tags/侧信道攻击/" style="font-size: 12px; color: #ccc">侧信道攻击</a> <a href="/tags/取证/" style="font-size: 12px; color: #ccc">取证</a> <a href="/tags/复原文件/" style="font-size: 12px; color: #ccc">复原文件</a> <a href="/tags/密码/" style="font-size: 12px; color: #ccc">密码</a> <a href="/tags/小米/" style="font-size: 30px; color: #111">小米</a> <a href="/tags/微信/" style="font-size: 12px; color: #ccc">微信</a> <a href="/tags/拒绝服务攻击/" style="font-size: 12px; color: #ccc">拒绝服务攻击</a> <a href="/tags/数据库/" style="font-size: 21px; color: #6f6f6f">数据库</a> <a href="/tags/数据挖掘/" style="font-size: 12px; color: #ccc">数据挖掘</a> <a href="/tags/文件格式/" style="font-size: 21px; color: #6f6f6f">文件格式</a> <a href="/tags/模型实现/" style="font-size: 12px; color: #ccc">模型实现</a> <a href="/tags/模糊测试/" style="font-size: 21px; color: #6f6f6f">模糊测试</a> <a href="/tags/破解/" style="font-size: 12px; color: #ccc">破解</a> <a href="/tags/自然语言处理/" style="font-size: 12px; color: #ccc">自然语言处理</a> <a href="/tags/访问控制/" style="font-size: 12px; color: #ccc">访问控制</a> <a href="/tags/路由器/" style="font-size: 12px; color: #ccc">路由器</a> <a href="/tags/远程执行/" style="font-size: 12px; color: #ccc">远程执行</a> <a href="/tags/逆向/" style="font-size: 12px; color: #ccc">逆向</a> <a href="/tags/重放攻击/" style="font-size: 12px; color: #ccc">重放攻击</a>
</div>
</div>
@ -369,7 +369,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -462,7 +462,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -377,7 +377,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -377,7 +377,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -377,7 +377,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -377,7 +377,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -377,7 +377,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -377,7 +377,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -377,7 +377,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -377,7 +377,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -377,7 +377,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -429,7 +429,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -522,7 +522,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -377,7 +377,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -377,7 +377,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -403,7 +403,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -496,7 +496,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -377,7 +377,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -403,7 +403,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -496,7 +496,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -377,7 +377,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -300,6 +300,32 @@
<article class="post post-type-normal" itemscope itemtype="http://schema.org/Article">
<header class="post-header">
<h2 class="post-title">
<a class="post-title-link" href="/2019/07/09/afl-first-try/" itemprop="url">
<span itemprop="name">AFL初次实践</span>
</a>
</h2>
<div class="post-meta">
<time class="post-time" itemprop="dateCreated" datetime="2019-07-09T14:46:07+08:00" content="2019-07-09">
07-09
</time>
</div>
</header>
</article>
<article class="post post-type-normal" itemscope itemtype="http://schema.org/Article">
<header class="post-header">
@ -377,7 +403,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -470,7 +496,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -377,7 +377,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -377,7 +377,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -377,7 +377,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -377,7 +377,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -377,7 +377,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -377,7 +377,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>

View File

@ -377,7 +377,7 @@
<a href="/archives/">
<span class="site-state-item-count">16</span>
<span class="site-state-item-count">17</span>
<span class="site-state-item-name">日志</span>
</a>
</div>
@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">44.8k</span>
<span title="Site words total count">48k</span>
</div>