From e661a9348a742da45fac29e199cd1a58049299e8 Mon Sep 17 00:00:00 2001 From: B333F Date: Mon, 1 Apr 2024 23:05:08 +0200 Subject: [PATCH] add sources --- HTB/rev/Behind_the_Scenes.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/HTB/rev/Behind_the_Scenes.md b/HTB/rev/Behind_the_Scenes.md index 80ff1e2..86b5fb0 100644 --- a/HTB/rev/Behind_the_Scenes.md +++ b/HTB/rev/Behind_the_Scenes.md @@ -14,6 +14,11 @@ Simply replace the UD2 instructions with NOP instructions in the disassembly to Then look up the flag string in the hexview located at the address referenced by first strncmp() call.
+Sources:
+https://en.wikipedia.org/wiki/C_signal_handling
+https://www.gnu.org/software/libc/manual/html_node/Program-Error-Signals.html
+https://mudongliang.github.io/x86/html/file_module_x86_id_318.html
+ deobfuscated pseudo code from Ghidra disassembler: ```C undefined8 main(int argc, char **argv)