How to create an hacking toolkit thanks to the pageinspect ...
summary
Shell scripts (no C) use pageinspect plus dd and od to read page checksum and extract how many tuples are on a page, and pull tuple header fields like xmin, xmax, infomask and infomask2 and full HeapTupleHeaderData plus user data. Scripts reproduce pageinspect functions (page_header, heap_page_items, bt_metap, bt_page_items, bt_page_stats), read xact status and multixid members directly from filesystem files, link user tuples to toast pages via toast index data, and search tuples by attribute values for disk vs memory comparison or crashed-engine forensics.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 4:44Starting with psql data
- 14:24Identifying the problem
- 23:54Working with transactions
- 31:49Demo of the toolkit
- 39:30Conclusion and Q&A
related talks
39mHow to think like a hacker
46mThe Bug Hunter's Methodology 2.0
01h 06mHow hacking works
27mDetecting (un)Intentionally Hidden Injected Code by Examining Page Table Entries
33mCommSec D1 - Faster, Wider, Greater: Modern Pentest Tricks
45mFinding Vulnerabilities through Static Analysis and Scripting
59mHack Yourself First
53mHow hacking works - Web edition