!!! THIS IS A WORK IN PROGRESS !!!

The challenges included in this repo were made for those new to binary analysis. The first few challenges will introduce you to commonly used tools and techniques. You will be required to compile and debug the C programs that have been created for you. You are encouraged to modify these programs and experiment.

For each C program the required tools will be listed. Links to relevant resources will also be included.

The goals of these challenges are..

• to teach you some of the basic techniques used to extract information from ELF (Linux) and PE (Windows) formatted binaries
• to introduce you to some of the tools used to extract information from executables
• TODO

Commands/Tools

• strings
• readelf
• objdump
• gcc
• gdb

Compile ctfjawn-ba-01.c (linking against the shared library ctfjawn.so) and answer the following questions. You must copy ctfjawn.so to $HOME/lib or wherever you'd like.. just be sure to update the command provided below with the proper location.

gcc -g flag

Produce debugging information in the operating system's native format (stabs,
COFF, XCOFF, or DWARF). GDB can work with this debugging information.

Most binaries won't include debug information. However, for whatever reason, malware has been seen in the wild with debug info. Perhaps used as part of a disinformation campaign 🤷.

gcc -g -o ctfjawn-ba-01 ctfjawn-ba-01.c -L$HOME/lib -lctfjawn

View the ELF program header

readelf -h ctfjawn-ba-01

Answer the following questions for the ctfjawn-ba-01 binary and the shared library, libctfjawn.so.

• What's the entry point address?
• At what address does main start?
• Number of program headers?
• Size of section headers?
• Number of section headers?