Workshop given at EthCC 2020
Slides available here
# Security Analysis tool for WebAssembly module and Blockchain Smart Contracts
git clone https://github.com/pventuzelo/octopus
Follow the installation guide here
# Install Radare2
git clone https://github.com/radareorg/radare2
cd radare2
./sys/install.sh
Download Cutter here
Function's signature:
0x60fe47b1
=> set(uint256)
0x6d4ce63c
=> get()
Function's signature:
-579684317 : 0x23b872dd
==> transferFrom(address,address,uint256)
830644336 : 0x70a08231
==> balanceOf(address)
1055744733 : 0xdd62ed3e
==> allowance(address,address)
1368608825 : 0x39509351
==> increaseAllowance(address,uint256)
-1280877047 : 0x095ea7b3
==> approve(address,uint256)
xxd -p contract.wasm | tr -d $'\n'xxd -r -p contract.bytecode contract.wasmwasm2wat contract.wasm -o contract.wastwat2wasm contract.wast -o contract.wasmPatrick Ventuzelo - @pat_ventuzelo
- Independent Security Researcher / Trainer.
- FREE online courses: here