This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
haas:spring2016:unix:projects:udr2 [2016/03/20 20:00] – [Errata] wedge | haas:spring2016:unix:projects:udr2 [2016/03/24 17:40] (current) – [Errata] wedge | ||
---|---|---|---|
Line 11: | Line 11: | ||
Typos and bug fixes: | Typos and bug fixes: | ||
- | * < | + | * A bug was discovered in binhaxx/ |
=====Objective===== | =====Objective===== | ||
- | Continuing our "1337 haxxing" | + | Continuing our "1337 haxxing" |
We resume our exploration with another practical example, this time based on real data generated by an EEG device. The intersection of hardware, software, and logic play vital roles in problem solving activities (even if it is just enabling analysts to make more educated guesses), and seems to be a skill increasingly taken for granted and alien. | We resume our exploration with another practical example, this time based on real data generated by an EEG device. The intersection of hardware, software, and logic play vital roles in problem solving activities (even if it is just enabling analysts to make more educated guesses), and seems to be a skill increasingly taken for granted and alien. | ||
Line 215: | Line 215: | ||
Pretty awesome, right? | Pretty awesome, right? | ||
=====Obtain the files===== | =====Obtain the files===== | ||
- | This week's project is located in the **spring2015/udr2/** directory of the UNIX Public Directory, in an archive called: **sleepfun.tar.bz2** | + | There are two resources you need to obtain for **udr2**: |
+ | |||
+ | ====binhaxx suite==== | ||
+ | Located at: http:// | ||
+ | |||
+ | Will be a collection of compressed archives for the **binhaxx** suite of pedagogical data manipulation tools. These are helper programs (or converters) optimized for various binary operations you may find yourself requiring the functionality of. | ||
+ | |||
+ | Please download the latest release, extract it, read the documentation, | ||
+ | |||
+ | Explore these tools and get a feel for how they work. You may find use for some of them while performing this and other projects. | ||
+ | |||
+ | ====sleepdata==== | ||
+ | The data for this week's project is located in the **udr2/** directory of the UNIX Public Directory, in an archive called: **sleepfun.tar.bz2** | ||
Make a copy of this into your home directory somewhere and set to work. | Make a copy of this into your home directory somewhere and set to work. | ||
**NOTE:** Hopefully it has been standard practice to locate project files in their own unique subdirectory, | **NOTE:** Hopefully it has been standard practice to locate project files in their own unique subdirectory, | ||
+ | |||
+ | **NOTE:** You probably do not want to add/ | ||
=====Data Files===== | =====Data Files===== | ||
Line 265: | Line 279: | ||
* **grep**(1) - can be contorted to cooperate | * **grep**(1) - can be contorted to cooperate | ||
* **date**(1) - might be useful for time/date manipulations | * **date**(1) - might be useful for time/date manipulations | ||
- | * **bgrep** (see below for usage) | + | * **binhaxx** tools |
... along with other tools previously encountered. | ... along with other tools previously encountered. | ||
- | ====bgrep==== | + | ====binhaxx search==== |
- | To assist you with this project, a special " | + | To assist you with this project, a special " |
- | It supports space-separated | + | It supports space-separated bytes of data, and even allows the use of ' |
===Example Usage=== | ===Example Usage=== | ||
Line 278: | Line 292: | ||
<cli> | <cli> | ||
- | $ cat session-201302200614.raw | bgrep '12 34' | + | $ cat session-201302200614.raw | search |
533b:12 34 | 533b:12 34 | ||
29af3:12 34 | 29af3:12 34 | ||
Line 296: | Line 310: | ||
<cli> | <cli> | ||
- | $ cat session-201302200614.raw | bgrep '12 .. 45' | + | $ cat session-201302200614.raw | search |
3326:12 e0 45 | 3326:12 e0 45 | ||
$ | $ | ||
Line 306: | Line 320: | ||
<cli> | <cli> | ||
- | $ cat session-201302200614.raw | bgrep '12 e.' | + | $ cat session-201302200614.raw | search |
1cf4:12 ee | 1cf4:12 ee | ||
206d:12 e0 | 206d:12 e0 | ||
Line 340: | Line 354: | ||
<cli> | <cli> | ||
- | $ cat session-201302200614.raw | bgrep '.c34' | + | $ cat session-201302200614.raw | search |
91c1:3c 34 | 91c1:3c 34 | ||
29029:8c 34 | 29029:8c 34 | ||
Line 350: | Line 364: | ||
$ | $ | ||
</ | </ | ||
- | |||
- | Notice in this last pattern, we opted not to space separate the pattern... it works either way (output will be space-separated regardless). | ||
This will hopefully prove to be a useful tool in your binary analysis endeavors. | This will hopefully prove to be a useful tool in your binary analysis endeavors. | ||
+ | |||
=====Submission===== | =====Submission===== | ||
Successful completion will result in the following criteria being met: | Successful completion will result in the following criteria being met: | ||
- | * When all is said and done, you will submit: | + | * When all is said and done, you will submit |
- | * **udr2.text**, | + | * **udr2.text**, |
+ | * an organized presentation of the answers/ | ||
+ | * **udr2.sh** | ||
+ | * a shell script containing all the necessary commands to accomplish the project | ||
+ | * be sure to adequately comment the script so I can see your thought process (particular | ||
+ | * the script should output important information related | ||
====Submit==== | ====Submit==== | ||
Please submit as follows: | Please submit as follows: | ||
<cli> | <cli> | ||
- | lab46: | + | lab46: |
Submitting unix project " | Submitting unix project " | ||
-> udr2.text(OK) | -> udr2.text(OK) | ||
+ | -> udr2.sh(OK) | ||
SUCCESSFULLY SUBMITTED | SUCCESSFULLY SUBMITTED | ||
lab46: | lab46: | ||
</ | </ | ||
+ |