Difference between pages "BoF Sessions" and "Tutorials/Reverse engineering embedded software using Radare2"

From LCA2015 Delegate wiki
(Difference between pages)
Jump to: navigation, search
(Tuesday 13th January 2015: BlueHackers BoF)
 
 
Line 1: Line 1:
{{Trail|Programme}}
+
This page describes preparation for [http://linux.conf.au/schedule/30102/view_talk?day=thursday Reverse engineering embedded software using Radare2]
This is an index of all the "Birds of a feather" sessions organised and run on an informal basis by attendees of the conference. We will be offering Birds of a Feather (BoF) sessions on Monday and Tuesday evenings.
+
  
If you want to get a group together then put a page up and link it here where people can discuss who/where/when about whatever you're interested in.
+
== Outline ==
  
'''NOTE''' that you must be a conference delegate in order to attend the BoF Sessions.
+
We will try and get through all the following:
  
==BoFs Recurring on Multiple Days==
+
* Introduction to Radare2 reverse engineering tool
 +
* The Radare2 utilities
 +
* Basics of using the Radare to examine a binary you probably have on your laptop
 +
* Looking at an arduino binary
 +
* Introduction to MIPS architecture and disassembly
 +
* Extracting firmware images
  
=== Running BoF ===
+
You might like to bring your own binary to play with as well instead!
  
Details TBC
+
==Important - please make an rc file ==
  
=== Martial Arts BoF ===
+
Radare2 was created by other, many people. Radare2 will by default print fortune cookies. Please, turn this feature off, by making the following file, in case there is a possibility of NSFW output.
  
Details: [[Martial Arts BoF]]
+
Instructions for Linux/Unix systems:
  
==Evening BoFs at LCA Venue ==
+
    echo 'e cfg.fortunes=false' > ~/.radare2rc
  
=== Monday 12th January 2015 ===
+
== Prerequisites ==
{| class="wikitable"
+
!Time
+
!OGGB 4
+
!Caseroom 2
+
!Caseroom 3
+
|-
+
!17:30
+
| rowspan=2 | Linux Australia AGM - contact @KathyReid for further information
+
| [[Saltstack BoF]]
+
|
+
|-
+
!18:30
+
| [[Functional Programming BoF]]
+
| [[CACert BoF/Assurance]]
+
|-
+
!19:30
+
|
+
|
+
| [[PostgreSQL BOF]]
+
|-
+
|}
+
  
=== Tuesday 13th January 2015 ===
+
If during the tutorial you are planning to follow the examples and/or try your own ideas, you really want to get this sorted before the event.
{| class="wikitable"
+
!Time
+
!OGGB 4
+
!Caseroom 2
+
!Caseroom 3
+
|-
+
!17:30
+
| [[Jobs BoF]]
+
| [[Personal Crypto & Security BOF]]
+
| [[Ansible BoF]]
+
|-
+
!18:30
+
|  [[CentOS/Fedora BoF]]
+
|
+
|  [[LMDB BoF]]
+
|-
+
!19:30
+
| [[Emacs BoF]]
+
| [[BlueHackers BoF]]
+
|
+
|-
+
|}
+
  
==Evening BoFs at Other Venues ==
+
Minimum requirements:
 +
* a C compiler and libraries needed to build radare2 - the "apt-gettable" version is out of date
 +
* xdot for viewing callgraphs
 +
* binwalk and srecord for firmware hacking
  
=== Thursday 15th January 2015 ===
+
Various other tools may be helpful, and indeed needed (e.g. an editor) to complete some of the examples
  
==== Astronomy BoF ====
+
If you are using a Debian-derived distro, for example:
Details: [[Astronomy BoF]]
+
  
== Lunch-time BOFs ==
+
    sudo apt-get install build-essential git xdot eog ghex binwalk vim gedit srecord
  
=== Tuesday ===
+
It should be possible to build radare2 on Linux, FreeBSD/NetBSD etc, Max OS/X and Windows and possibly on Android if you try hard enough (using a Debian root, for example)
  
==== [[Queer_BoF|Queer / LGBTIQ Lunch BoF]] ====
+
However, the tutorial examples have only been tested using Debian Wheezy.
  
=== Wednesday ===
+
=== Clone & build radare2 ===
  
==== [[keysigning|OpenPGP Keysigning]] ====
+
Note, changing to the lca2015_tutorial branch is important, because the software is under active development there could be breakage in master upstream
  
== BoF Wait-list ==
+
    git clone http://github.com/pastcompute/radare2
 +
    cd radare2
 +
    git checkout tutorial_branch
 +
    ./configure
 +
    make -j
 +
    sudo make symstall
  
If the above room allocation is full please add an entry here and we can try to make additional space available.
+
Note, you can install as a normal user if you need to:
  
* [[TinFoilHats]]
+
    ./configure --prefix=$HOME/path/to/wherever
* [[ingress]]
+
    make -j
 +
    sudo make symstall
 +
    export PATH=$HOME/path/to/wherever:$PATH
 +
 
 +
Clone the examples repository, ready for use during the tutorial
 +
 
 +
    cd
 +
    git clone http://github.com/pastcompute/lca2015-radare2-tutorial
 +
 
 +
I have already added prebuilt examples to git but there are instructions for building them in git, you will need the arduino IDE or an openwrt buildroot.
 +
 
 +
==Troubleshooting==
 +
 
 +
The tutorial is not until Thursday afternoon. If you need help with the above ping me on Twitter, preferably before the day! [https://twitter.com/pastcompute @pastcompute]

Revision as of 22:35, 10 January 2015

This page describes preparation for Reverse engineering embedded software using Radare2

Outline

We will try and get through all the following:

  • Introduction to Radare2 reverse engineering tool
  • The Radare2 utilities
  • Basics of using the Radare to examine a binary you probably have on your laptop
  • Looking at an arduino binary
  • Introduction to MIPS architecture and disassembly
  • Extracting firmware images

You might like to bring your own binary to play with as well instead!

Important - please make an rc file

Radare2 was created by other, many people. Radare2 will by default print fortune cookies. Please, turn this feature off, by making the following file, in case there is a possibility of NSFW output.

Instructions for Linux/Unix systems:

   echo 'e cfg.fortunes=false' > ~/.radare2rc

Prerequisites

If during the tutorial you are planning to follow the examples and/or try your own ideas, you really want to get this sorted before the event.

Minimum requirements:

  • a C compiler and libraries needed to build radare2 - the "apt-gettable" version is out of date
  • xdot for viewing callgraphs
  • binwalk and srecord for firmware hacking

Various other tools may be helpful, and indeed needed (e.g. an editor) to complete some of the examples

If you are using a Debian-derived distro, for example:

   sudo apt-get install build-essential git xdot eog ghex binwalk vim gedit srecord

It should be possible to build radare2 on Linux, FreeBSD/NetBSD etc, Max OS/X and Windows and possibly on Android if you try hard enough (using a Debian root, for example)

However, the tutorial examples have only been tested using Debian Wheezy.

Clone & build radare2

Note, changing to the lca2015_tutorial branch is important, because the software is under active development there could be breakage in master upstream

   git clone http://github.com/pastcompute/radare2
   cd radare2
   git checkout tutorial_branch
   ./configure
   make -j
   sudo make symstall

Note, you can install as a normal user if you need to:

   ./configure --prefix=$HOME/path/to/wherever
   make -j
   sudo make symstall
   export PATH=$HOME/path/to/wherever:$PATH

Clone the examples repository, ready for use during the tutorial

   cd
   git clone http://github.com/pastcompute/lca2015-radare2-tutorial

I have already added prebuilt examples to git but there are instructions for building them in git, you will need the arduino IDE or an openwrt buildroot.

Troubleshooting

The tutorial is not until Thursday afternoon. If you need help with the above ping me on Twitter, preferably before the day! @pastcompute