Return to Question

Better usage of the wiki syntax

Source Link

edited Jul 18, 2016 at 7:17

19.2k
29
87
150

So I'mI am trying to learn radare2 by following aan on-line guide online, but from what I'veI have seen there and on other sites, my r2r2 behavior is wacky.

My disassembly, however, looks like this, with strange, fat arrows and and no string comments, which are rather critical for this particular crackme challenge. Instead, I used the "iz"iz command, but the string "g00dJ0B!""g00dJ0B!" displayed without the "!"! which is pretty weird and certainly not helpful, because that string is the password I was looking for.

Finally, the author gets this output from his memory read: [0x080483e0]> px @ sym.pass.1964 offset - 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 0x0804a040 7700 0000 3000 0000 7700 0000 6700 0000 w...0...w...g... 0x0804a050 7200 0000 6500 0000 6100 0000 7400 0000 r...e...a...t... 0x0804a060 0000 0000 4743 433a 2028 5562 756e 7475 ....GCC: (Ubuntu 0x0804a070 2f4c 696e 6172 6f20 342e 362e 312d 3975 Linaro 4.6.1-9u 0x0804a080 6275 6e74 7533 2920 342e 362e 3100 002e buntu3) 4.6.1... 0x0804a090 7379 6d74 6162 002e 7374 7274 6162 002e symtab..strtab.. 0x0804a0a0 7368 7374 72 shstr

[0x080483e0]> px @ sym.pass.1964
offset -   0 1  2 3  4 5  6 7  8 9  A B  C D  E F  0123456789ABCDEF
0x0804a040  7700 0000 3000 0000 7700 0000 6700 0000  w...0...w...g...
0x0804a050  7200 0000 6500 0000 6100 0000 7400 0000  r...e...a...t...
0x0804a060  0000 0000 4743 433a 2028 5562 756e 7475  ....GCC: (Ubuntu
0x0804a070  2f4c 696e 6172 6f20 342e 362e 312d 3975  Linaro 4.6.1-9u
0x0804a080  6275 6e74 7533 2920 342e 362e 3100 002e  buntu3) 4.6.1...
0x0804a090  7379 6d74 6162 002e 7374 7274 6162 002e  symtab..strtab..
0x0804a0a0  7368 7374 72                             shstr

...while I get this when using the same command: [0x080483e0]> px @ sym.pass.1964

offset - 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 0x0804a040 ffff ffff ffff ffff ffff ffff ffff ffff ................ 0x0804a050 ffff ffff ffff ffff ffff ffff ffff ffff ................ 0x0804a060 ffff ffff ffff ffff ffff ffff ffff ffff ................ 0x0804a070 ffff ffff ffff ffff ffff ffff ffff ffff ................ 0x0804a080 ffff ffff ffff ffff ffff ffff ffff ffff ................ 0x0804a090 ffff ffff ffff ffff ffff ffff ffff ffff ................ 0x0804a0a0 ffff ffff ffff ffff ffff ffff ffff ffff ................

[0x080483e0]> px @ sym.pass.1964
- offset -   0 1  2 3  4 5  6 7  8 9  A B  C D  E F  0123456789ABCDEF
0x0804a040  ffff ffff ffff ffff ffff ffff ffff ffff  ................
0x0804a050  ffff ffff ffff ffff ffff ffff ffff ffff  ................
0x0804a060  ffff ffff ffff ffff ffff ffff ffff ffff  ................
0x0804a070  ffff ffff ffff ffff ffff ffff ffff ffff  ................
0x0804a080  ffff ffff ffff ffff ffff ffff ffff ffff  ................
0x0804a090  ffff ffff ffff ffff ffff ffff ffff ffff  ................
0x0804a0a0  ffff ffff ffff ffff ffff ffff ffff ffff  ................

So I'm trying to learn radare2 by following a guide online, but from what I've seen there and on other sites, my r2 behavior is wacky.

My disassembly, however, looks like this, with strange, fat arrows and and no string comments, which are rather critical for this particular crackme challenge. Instead, I used the "iz" command, but the string "g00dJ0B!" displayed without the "!" which is pretty weird and certainly not helpful, because that string is the password I was looking for.

...while I get this when using the same command: [0x080483e0]> px @ sym.pass.1964

offset - 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 0x0804a040 ffff ffff ffff ffff ffff ffff ffff ffff ................ 0x0804a050 ffff ffff ffff ffff ffff ffff ffff ffff ................ 0x0804a060 ffff ffff ffff ffff ffff ffff ffff ffff ................ 0x0804a070 ffff ffff ffff ffff ffff ffff ffff ffff ................ 0x0804a080 ffff ffff ffff ffff ffff ffff ffff ffff ................ 0x0804a090 ffff ffff ffff ffff ffff ffff ffff ffff ................ 0x0804a0a0 ffff ffff ffff ffff ffff ffff ffff ffff ................

So I am trying to learn radare2 by following an on-line guide, but from what I have seen there and on other sites, my r2 behavior is wacky.

My disassembly, however, looks like this, with strange, fat arrows and and no string comments, which are rather critical for this particular crackme challenge. Instead, I used the iz command, but the string "g00dJ0B!" displayed without the ! which is pretty weird and certainly not helpful, because that string is the password I was looking for.

Finally, the author gets this output from his memory read:

[0x080483e0]> px @ sym.pass.1964
offset -   0 1  2 3  4 5  6 7  8 9  A B  C D  E F  0123456789ABCDEF
0x0804a040  7700 0000 3000 0000 7700 0000 6700 0000  w...0...w...g...
0x0804a050  7200 0000 6500 0000 6100 0000 7400 0000  r...e...a...t...
0x0804a060  0000 0000 4743 433a 2028 5562 756e 7475  ....GCC: (Ubuntu
0x0804a070  2f4c 696e 6172 6f20 342e 362e 312d 3975  Linaro 4.6.1-9u
0x0804a080  6275 6e74 7533 2920 342e 362e 3100 002e  buntu3) 4.6.1...
0x0804a090  7379 6d74 6162 002e 7374 7274 6162 002e  symtab..strtab..
0x0804a0a0  7368 7374 72                             shstr

...while I get this when using the same command:

[0x080483e0]> px @ sym.pass.1964
- offset -   0 1  2 3  4 5  6 7  8 9  A B  C D  E F  0123456789ABCDEF
0x0804a040  ffff ffff ffff ffff ffff ffff ffff ffff  ................
0x0804a050  ffff ffff ffff ffff ffff ffff ffff ffff  ................
0x0804a060  ffff ffff ffff ffff ffff ffff ffff ffff  ................
0x0804a070  ffff ffff ffff ffff ffff ffff ffff ffff  ................
0x0804a080  ffff ffff ffff ffff ffff ffff ffff ffff  ................
0x0804a090  ffff ffff ffff ffff ffff ffff ffff ffff  ................
0x0804a0a0  ffff ffff ffff ffff ffff ffff ffff ffff  ................

Source Link

asked Jul 17, 2016 at 17:04

user16765

My Radare2 Installation Not Working As Expected

So I'm trying to learn radare2 by following a guide online, but from what I've seen there and on other sites, my r2 behavior is wacky.

The author's disassembly looks like this, with neat little arrows and helpful strings that appear to the right of the code.

My disassembly, however, looks like this, with strange, fat arrows and and no string comments, which are rather critical for this particular crackme challenge. Instead, I used the "iz" command, but the string "g00dJ0B!" displayed without the "!" which is pretty weird and certainly not helpful, because that string is the password I was looking for.

...while I get this when using the same command: [0x080483e0]> px @ sym.pass.1964

offset - 0 1 2 3 4 5 6 7 8 9 A B C D E F 0123456789ABCDEF 0x0804a040 ffff ffff ffff ffff ffff ffff ffff ffff ................ 0x0804a050 ffff ffff ffff ffff ffff ffff ffff ffff ................ 0x0804a060 ffff ffff ffff ffff ffff ffff ffff ffff ................ 0x0804a070 ffff ffff ffff ffff ffff ffff ffff ffff ................ 0x0804a080 ffff ffff ffff ffff ffff ffff ffff ffff ................ 0x0804a090 ffff ffff ffff ffff ffff ffff ffff ffff ................ 0x0804a0a0 ffff ffff ffff ffff ffff ffff ffff ffff ................

I would appreciate any help with in resolving these issues very much, thank you!

radare2