Freaks City

go-callvis is a static analysis tool that generates interactive call graphs for Go projects. It uses Graphviz to render the relationships between functions and packages, making it easy to understand code structure and dependencies. Rqeuirements are straightforward: Go 1.19 or higher must be installed, and analysis commands should be executed fr ...

Common Subexpression Elimination (CSE) is a classic compiler optimization that removes redundant computations by identifying repeated expressions whose operands remain unchanged between evaluations. This reduces execution time and computasional overhead. Consider the following code: int temp = b * c; int a = b * c + g; int d = b * c + e; Since ...

Challenge 1: Binary Extension Spoofing and State Overwrite The initial binary presents itself with a .com file extension, indicating a deliberate attempt to mask its true architecture. Peering into the header reveals a standard executable magic number, confirming it is a valid Linux ELF file. Stripping the misleading extension allows standard d ...

Analysis Methodologies Static Analysis This approach involves decompiling an application using tools like Apktool, dex2jar, jd-gui, and smali2dex. The resulting Java and XML files are then scanned for vulnerabilities. This is typically done by searching for keywords and patterns indicative of insecure coding practices. The findings are compiled ...

p3c-pmd Overview p3c-pmd is a static code analysis tool that enforces Alibaba's Java coding stanndards. It extends the open-source PMD framework to specifically check for violations of the Alibaba Java Development Guidelines. PMD Architecture PMD operates by: Parsing source code into a Abstract Syntax Tree (AST) Appplying rule sets to traverse ...