Anatomy of a Gopher - Binary Analysis of Go Binaries - Alex Useche - Ekoparty Security Conference - 2020

Dive into the world of Go binary analysis in this conference talk from Ekoparty Security Conference. Explore the unique characteristics of Go binaries compared to C binaries, and discover techniques used by reverse engineers to analyze Go applications. Learn about Go assembler, pseudo-registers, tooling, and objdump in Go 1.15. Uncover methods for identifying Go functions, understanding stacks and prologues, and examining calling conventions. Investigate low-level functions, error handling, and language constructs specific to Go. Gain valuable insights into the anatomy of a Gopher, particularly useful for those working with IoT, edge computing devices, and web assembly applications.

Intro
hexes and punks
what is this about?
the go assembler
go pseudo-registers
tooling
objdump In go 1.15
finding ogo functions
stacks & prologue
calling conventions
identifying underlying language constru
Investigating low level functions
what to look for
go error handing ID
wrap up