Download - Binary art - funky PoCs & visual docs
![Page 1: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/1.jpg)
Insomni’hackGeneva, Switzerland
Ange Albertini2014/03/21
funky PoCs & visual docs
![Page 2: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/2.jpg)
http://corkami.com
reverse engineering&
visual documentations
![Page 3: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/3.jpg)
boring?
● file formats were supposed to be safe○ public specs○ open-source parsers
● {weirdness} == {exploits} ?● software = parse, sanitize, recover
![Page 4: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/4.jpg)
formats’ diversity 1/2
no header● COM (1982), MBR (1982)magic signature● none: DOL (2001)● 2: TIFF, PE● 4: most standard● >4: PNG, PDF
![Page 5: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/5.jpg)
start offset:● archives● range: PDF● mostly 0special properties● deprecated header: PE● variable scanning direction: PDF● multi-versions: BMP● scanned chunk: JPEG● no official names: ZIP
formats’ diversity 2/2
![Page 6: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/6.jpg)
![Page 7: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/7.jpg)
![Page 8: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/8.jpg)
![Page 9: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/9.jpg)
![Page 10: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/10.jpg)
![Page 11: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/11.jpg)
![Page 12: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/12.jpg)
![Page 13: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/13.jpg)
quine (relay)
![Page 14: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/14.jpg)
![Page 15: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/15.jpg)
polyglot
![Page 16: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/16.jpg)
![Page 17: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/17.jpg)
![Page 18: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/18.jpg)
![Page 19: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/19.jpg)
![Page 20: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/20.jpg)
![Page 21: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/21.jpg)
schizophren
![Page 22: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/22.jpg)
![Page 23: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/23.jpg)
misc
![Page 24: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/24.jpg)
![Page 25: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/25.jpg)
128, 217, 255, 217,128, 38, 1, 38
![Page 26: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/26.jpg)
![Page 27: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/27.jpg)
![Page 28: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/28.jpg)
![Page 29: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/29.jpg)
crypto-tology:for anything crypto, ask @veorq
(coz he’s awesome)
![Page 30: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/30.jpg)
![Page 31: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/31.jpg)
![Page 32: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/32.jpg)
![Page 33: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/33.jpg)
![Page 34: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/34.jpg)
![Page 35: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/35.jpg)
![Page 36: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/36.jpg)
![Page 37: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/37.jpg)
![Page 38: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/38.jpg)
![Page 39: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/39.jpg)
![Page 40: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/40.jpg)
![Page 41: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/41.jpg)
conclusionon binary formats
![Page 42: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/42.jpg)
On binary formats
● specs far from perfect● plenty of fun● many consequences for infosec
○ unforeseen attack channels
![Page 43: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/43.jpg)
![Page 44: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/44.jpg)
on visual docshttp://pics.corkami.com
http://prints.corkami.com
![Page 45: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/45.jpg)
disclaimerno awards, no studies
![Page 46: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/46.jpg)
![Page 47: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/47.jpg)
![Page 48: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/48.jpg)
![Page 49: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/49.jpg)
![Page 50: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/50.jpg)
goalcreate useful
documentationsbased on reality
![Page 51: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/51.jpg)
postersself-contained
● immediate ‘big picture’● no roleplay gamebook
![Page 52: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/52.jpg)
use common senseand your own eyes
![Page 53: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/53.jpg)
![Page 54: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/54.jpg)
creativity?give yourself time!
to fail!
![Page 55: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/55.jpg)
![Page 56: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/56.jpg)
![Page 57: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/57.jpg)
![Page 58: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/58.jpg)
![Page 59: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/59.jpg)
![Page 60: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/60.jpg)
define your audiencelower and upper limits
![Page 61: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/61.jpg)
“you should add …”see “setting a upper limit”
![Page 62: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/62.jpg)
“too simple/simplified”? 1/ teach others, beginners, kids
2/ no more excuses for not knowing
![Page 63: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/63.jpg)
remove the obviousguessing doesn’t hurt
![Page 64: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/64.jpg)
![Page 65: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/65.jpg)
spaceoptimal separator
![Page 66: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/66.jpg)
left right
![Page 67: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/67.jpg)
left right
![Page 68: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/68.jpg)
left right
![Page 69: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/69.jpg)
![Page 70: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/70.jpg)
![Page 71: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/71.jpg)
no unnecessary extrasleave doors closed
(to be opened somewhere else)
![Page 72: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/72.jpg)
requirements
![Page 73: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/73.jpg)
a computera transparent tablecloth
![Page 74: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/74.jpg)
![Page 76: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/76.jpg)
@jaredcatkinson’s prefetch101
![Page 77: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/77.jpg)
conclusionon visual docs
![Page 78: Binary art - funky PoCs & visual docs](https://reader034.vdocuments.net/reader034/viewer/2022051412/54b701724a7959943a8b45d2/html5/thumbnails/78.jpg)
On visual documentations
● it doesn’t hurt● it’s not so hard● requires time