VPN Так как бусти делать совсем уж зашквар, информация следующая: Ну в общем, так как я держу свой сервачок впна, а его надо оплачивать и он простаивает (его использует пара людей, включая меня), я тут подумал, что это может быть кому-то нужно Сервер в Лондоне…

Поскольку контента нет, напомню, что есть бложик с каким-то количество всяких статей
ブログ.きく.コム

В том числе подборка кучи всяких полезностей, связанных с ревёрсом
ブログ.きく.コム/2021/10/02/Reverse-Engineering-Roadmap/

?❤️

Windows Internals Blog

Reverse Engineering Roadmap

Склад / Чулан / Сундук ссылок на всё, что только можно, связанное с ревёрсом / книжечки / курсы / много инфы

https://github.com/LordNoteworthy/al-khaser

GitHub

GitHub - LordNoteworthy/al-khaser: Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection. - GitHub - LordNoteworthy/al-khaser: Public malware techniques used in the wild: Virtual Machi...

Ребята сделали чатик для ру читдев камунити
Думаю, многим оно зайдёт ?

https://t.me/makingcheat

Telegram

CheatXplorer #cheatdev

первое русскоязычное коммьюнити читеров в телеграм правила: https://github.com/sapdragon/cheatxplorer/blob/main/readme.md

? Find and execute WinAPI functions with Assembly

If you want to take a happy little journey through PEB structs, PE headers and kernel32.dll Export Table to spawn some "calc.exe" on x64 using Assembly, here it is.

*? What you will learn:*

— WinAPI function manual location with Assembly;
— PEB Structure and PEB_LDR_DATA;
— PE File Structure;
— Relative Virtual Address calculation;
— Export Address Table (EAT);
— Windows x64 calling-convention in practice;
— Writing in Assembly like a real Giga-Chad...

*? Source:*
https://print3m.github.io/blog/x64-winapi-shellcoding

#maldev #winapi #x64 #shellcode #assembly

#research #firmware

How To Do Firmware Analysis. Tools, Tips, and Tricks

https://www.pentestpartners.com/security-blog/how-to-do-firmware-analysis-tools-tips-and-tricks/

Pentestpartners

How To Do Firmware Analysis. Tools, Tips, and Tricks | Pen Test Partners

So, you’ve got a firmware dump. Perhaps a raw read off a chip? An update file you downloaded off the internet? Now what? Taking a firmware dump and turning it into something useful can sometimes be painful. Sometimes you’ll be faced with proprietary (barely…

eCRE – Reverse Engineering Professional, INE Version, 2021

https://youtu.be/GBYwjch6oEE?si=ksVIdq7395j-W9es

YouTube

Disobey 2018 - Reverse Engineering fine details of Game Boy hardware - Joonas Javanainen

Remote kernel debugging the KVM hypervisor (full walkthrough video): https://youtu.be/cNfe4SguEYw

KVM is distinguished from Qemu: the latter runs in user mode to handle device virtualization, while the former runs in privileged kernel to implement just the core hypervisor functionality (VMM). KVM-Qemu combo is a popular choice for full system virtualization on Linux platform, but actually, both KVM and Qemu are self-contained tools that can virtualize stand-alone with certain technical restrictions; KVM being the hardest to attack. @alisaesage

YouTube

Remote kernel debugging KVM hypervisor (full walkthrough video)

In this video Alisa shows a full walkthrough of remote kernel debugging KVM hypervisor on Linux. KVM is distinguished from Qemu: the latter runs in user mode to handle device virtualization, while the former runs in privileged kernel to implement just the…