Browse Source

add nice pictures to presentation slides

master
nitowa 10 months ago
parent
commit
fccf1b99c2

BIN
SemSEpresentation/slides.pdf View File


+ 26
- 8
SemSEpresentation/slides.tex View File

27
 \usepackage{booktabs}
27
 \usepackage{booktabs}
28
 \usepackage{url}
28
 \usepackage{url}
29
 \usepackage{xcolor}
29
 \usepackage{xcolor}
30
+\usepackage{graphicx}
31
+\graphicspath{ {./} }
30
 
32
 
31
 \definecolor{codegreen}{rgb}{0,0.6,0}
33
 \definecolor{codegreen}{rgb}{0,0.6,0}
32
 \definecolor{codegray}{rgb}{0.5,0.5,0.5}
34
 \definecolor{codegray}{rgb}{0.5,0.5,0.5}
110
   Examples follow, use in production at your own risk ;)
112
   Examples follow, use in production at your own risk ;)
111
 \end{frame}
113
 \end{frame}
112
 
114
 
115
+\begin{frame}[fragile]
116
+	\frametitle{Why this works}
117
+	A dynamic array in storage slot $p$ stores its data at continuous addresses starting at $keccak(p)$. 
118
+	
119
+	For example, if the variable $x$ is a dynamic array occupying storage slot 3, $x[o]$ can be found at $keccak(0x3)+o$.
120
+	
121
+	An attacker can use this information to overwrite any storage slot by finding an appropriate offset value.
122
+\end{frame}
123
+
124
+\begin{frame}[fragile]
125
+	\frametitle{Why this works}
126
+	
127
+	\includegraphics[width=\textwidth]{storage}
128
+	
129
+\end{frame}
130
+
113
 \subsection[Examples]{Examples}
131
 \subsection[Examples]{Examples}
114
 \begin{frame}[fragile]
132
 \begin{frame}[fragile]
115
   \frametitle{Unchecked Array Write}
133
   \frametitle{Unchecked Array Write}
194
 	\end{lstlisting}
212
 	\end{lstlisting}
195
 \end{frame}
213
 \end{frame}
196
 
214
 
197
-\begin{frame}[fragile]
198
-	\frametitle{Why this works}
199
-	A dynamic array in storage slot $p$ stores its data at continuous addresses starting at $keccak(p)$. 
200
-	
201
-	For example, if the variable $x$ is a dynamic array occupying storage slot 3, $x[o]$ can be found at $keccak(0x3)+o$.
202
-	
203
-	An attacker can use this information to overwrite any storage slot by finding an appropriate offset value.
204
-\end{frame}
215
+
205
 
216
 
206
 \section{Detecting and Exploiting}
217
 \section{Detecting and Exploiting}
207
 \subsection[Detecting SWC-124]{Detecting SWC-124}
218
 \subsection[Detecting SWC-124]{Detecting SWC-124}
234
   \end{itemize}
245
   \end{itemize}
235
 \end{frame}
246
 \end{frame}
236
 
247
 
248
+\begin{frame}[fragile]
249
+	\texttt{\$ slither Bethorde.sol --print variable-order}
250
+
251
+	\includegraphics[width=\textwidth]{slither}
252
+
253
+\end{frame}
254
+
237
 \subsection[Exploiting SWC-124]{Exploiting SWC-124}
255
 \subsection[Exploiting SWC-124]{Exploiting SWC-124}
238
 
256
 
239
 % TODO: Exploitation is trivial, should we just go back and explain or should we go into memory layout? Can we handle it in time?
257
 % TODO: Exploitation is trivial, should we just go back and explain or should we go into memory layout? Can we handle it in time?

BIN
SemSEpresentation/slither.jpg View File


BIN
SemSEpresentation/storage.jpg View File


Loading…
Cancel
Save