Dan Conn
tautologyToday I discovered that Ghidra renders pngs in the disassembly view. My new ambition: to put goatse in all my binaries.
It renders animated gifs, though only a frame at a time. The frame changes every time there's a UX interaction (e.g. a keypress)
deadbeef@tautology Interesting. How about APNG?
@deadbeef exactly the same as the animated GIF.
@tautology Ah, well it was worth a try. It's curious how it updates only on interacting with the ui.
@deadbeef I suspect MJPEG would be the same. I haven't tried MPEG.
It could confuse a reverse engineer just scrolling through the disassembly listing.
Wesley McGrew@tautology maybe an animated gif that looks like ghidra disassembled code, but that changes on each UX interaction. Or looks like a command prompt window repartitioning the drive.
@tautology Cool! Although that particular example wouldn't work as I use a custom dark theme haha. Do you know what other image formats it works for? I'm guessing it reads the magic numbers/bytes
@deadbeef Yeah that's where it falls down in that people use different colour themes. There's some weird scaling going on which needs a dig too.
Time to test other image formats. An animated gif next.
@tautology I hope this is a joke. If it's not, does it work with all archs and executable formats?
@tautology Because if it isn't I have some ideas of my own ;)
@deadbeef I found it when reverse engineering a Qt5 Windows executable. I can't see why it wouldn't work on other formats. One idea I had was to put in an image of a fake disassembly.
@tautology Haha, sure would be interesting. I know there's one anticheat team that did something similar to this already - put an imgur link to a group picture of themselves so any reverse engineers searching for strings would find it.
barsteward@tautology This is taking things significantly further than my suggestion of putting our PSIRT email address/url as a string in the should-never-be-seen BootROM of our chips. Goatse might be harder to get corporate sign-off for.
@tautology Loving you doing the important work.