Alessandro Gario

btfparse, a parser for linux kernel debug symbols

Posted on February 1, 2022 | 3 minutes | Alessandro Gario

A short post on how the BTF type format was born, why I wrote a small parser library for it and where to find it. [Read More]

cpp bpf

Releasing two BPF tools I developed: ebpfpub and ebpfault

Posted on January 7, 2019 | 1 minutes | Alessandro Gario

I’ve released two new BPF tools written in C++ with LLVM: ebpfault (a system call fault injector) and ebpfpub (a system call tracer). [Read More]

cpp bpf

DisARMing a Raspberry Pi - BSides San Francisco CTF 2017

Posted on March 18, 2017 | 8 minutes | Alessandro Gario

The diary of a small expedition my old friend Raspberry and I have undertaken, exploring the ARM challenge called ‘disarming’ from the BSides San Francisco CTF 2017. [Read More]

writeup bsides

Solving SmokeStack, from the third Flare-On Challenge

Posted on November 3, 2016 | 20 minutes | Alessandro Gario

A tour in the depths of the SmokeStack level of the third Flare On Challenge from FireEye. The article also covers the internals of the virtual machine used by the binary, presenting a simple command line disassembler written in C++. [Read More]

writeup flareon