Introduction To Reversing Golang Binaries

Golang binaries are a bit hard to analyze but there are some tricks to locate the things and view what is doing the code.

Is possible to list all the go files compiled in the binary even in an striped binaries, in this case we have only one file gohello.go this is a good clue to guess what is doing the program.

On stripped binaries the runtime functions are not resolved so is more difficult to locate the user algorithms:

If we start from the entry point, we will found this mess:

The golang string initialization are encoded and is not displayed on the strings window.

How to locate main?  if its not stripped just bp on [package name].main for example bp main.main, (you can locate the package-name searching strings with ".main")

And here is our main.main:

The code is:

So in a stripped binary we cant find the string "hello world" neither the initialization 0x1337 nor the comparator 0x1337, all this is obfuscated.

The initialization sequence is:

The procedure for locating main.main in stripped binaries is:

1. Click on the entry point and locate the runtime.mainPC pointer:

2. click on runtime.main function (LAB_0042B030):

3. locate the main.main call after the zero ifs:

4. click on it and here is the main:

The runtime is not obvious for example the fmt.Scanf() call perform several internal calls until reach the syscall, and in a stripped binary there are no function names.

In order to identify the functions one option is compile another binary with symbols and make function fingerprinting.

In Ghidra we have the script golang_renamer.py which is very useful:

After applying this plugin the main looks like more clear:

This script is an example of function fingerprinting, in this case all the opcodes are included on the crc hashing:

# This script fingerprints the functions

#@author: sha0coder

#@category fingerprinting

print "Fingerprinting..."

import zlib

# loop through program functions

function = getFirstFunction()

while function is not None:

name = str(function.getName())

entry = function.getEntryPoint()

body = function.getBody()

addresses = body.getAddresses(True)

if not addresses.hasNext():

# empty function

continue

ins = getInstructionAt(body.getMinAddress())

opcodes = ''

while ins and ins.getMinAddress() <= body.getMaxAddress():

for b in ins.bytes:

opcodes += chr(b & 0xff)

ins = getInstructionAfter(ins)

crchash = zlib.crc32(opcodes) & 0xffffffff

print name, hex(crchash)

function = getFunctionAfter(function)

More info

1. Hack App
2. Hacking App
3. Growth Hacker Tools
4. Hack Tools
5. Hack Tools Download
6. Hack Tools Github
7. Beginner Hacker Tools
8. Hacker Tools Free
9. Pentest Tools Website Vulnerability
10. Pentest Tools Url Fuzzer
11. Ethical Hacker Tools
12. Computer Hacker
13. Hacking Tools Windows 10
14. Top Pentest Tools
15. How To Install Pentest Tools In Ubuntu
16. Wifi Hacker Tools For Windows
17. Hacker Techniques Tools And Incident Handling
18. Hacker Tools For Pc
19. Hack Apps
20. Tools Used For Hacking
21. Best Hacking Tools 2020
22. Hacking Tools Kit
23. Hacking Tools Mac
24. Best Pentesting Tools 2018
25. Nsa Hack Tools Download
26. Usb Pentest Tools
27. Pentest Tools List
28. Pentest Reporting Tools
29. Pentest Tools Find Subdomains
30. Hacking Tools And Software
31. Hack Tool Apk No Root
32. Hacker
33. Pentest Tools Android
34. Hacker Tools Apk
35. Hacker Tool Kit
36. Hacker Tools For Pc
37. Termux Hacking Tools 2019
38. Pentest Tools Website
39. Github Hacking Tools
40. Nsa Hacker Tools
41. Hack Tools
42. How To Install Pentest Tools In Ubuntu
43. Black Hat Hacker Tools
44. Growth Hacker Tools
45. Pentest Tools Apk
46. Bluetooth Hacking Tools Kali
47. Wifi Hacker Tools For Windows
48. Best Hacking Tools 2020
49. Hacker Tools Apk Download
50. Pentest Tools Android
51. Hack Apps
52. Hak5 Tools
53. Pentest Tools Github
54. Github Hacking Tools
55. Hacking Tools Windows
56. Hacking Tools For Windows 7
57. Hack Tools For Games
58. Hacking Tools Windows
59. Hack Tools 2019
60. Hacking Tools Mac
61. Hacking Tools
62. Hacker Tools Free Download
63. Pentest Tools Android
64. Pentest Tools Review
65. Tools Used For Hacking
66. Hack And Tools
67. Hacker Tools 2020
68. Pentest Tools Linux