RCE Messageboard's Regroupment > Forums > Blogs Forum

Pages : 1 [2] 3 4

251. Recon2008
252. Testing debuggers
253. Kernel debugging with IDA
254. From simple to complex
255. Bridge them all
256. # IDA-Pro 5.4: old bugs on the new streets (was: to download or to not download)
257. # RE course in Tel-Aviv
258. Playstation3 / PS3 - Harddisk encryption
259. S7 airlines is under attack!
260. # simple OllyScript for upx
261. # Baghdad - dead alive breakpoints
262. # PatchDiff => Hex-Rays => WinDiff: how to analyze patches faster
263. Class Informer IDA plug-in
264. Windows 7 syscall list
265. IDA v5.4 release is not that far away
266. Windows 7 kernel structures
267. # shell-codes analysis: where is EP?
268. x64 SEH & Explorer Suite Update
269. # FreeLibrary bug becomes a PE packers bug
270. San-Francisco - the place to meet
271. # MS VC - challenge for PE packers
272. Unpinning Imported .dll's
273. # 3 lines C-prog hurts MS VC
274. # chilly suspicions of new win32 bug
275. Malware: Unpacking Waledac
276. # dynamic TLS callbacks instead of SEH
277. # IDA-Pro and simple (E)SP hack
278. # GetProcessDEPPolicy for XP/XP SP2
279. NtSetDebugFilterState as Anti-Dbg Trick
280. # TLS callbacks w/o USER32 (part III)
281. # TLS callbacks w/o USER32 (part II)
282. # another EnableTracing() bug
283. how powerful IDA Script might be
284. # IDA-Pro EnableTracing() - how not to do
285. IDA and TLS callbacks
286. # DS/FS is under hardware breakpoints
287. # XP/S2K3 fails to process TLS w/o USER32
288. blog was moved
289. Guidelines to MFC reversing
290. IOCTL-Proxy
291. Dynamic C++ Proposal
292. Command line version of OSR's DeviceTree
293. Backdoor.Win32.UltimateDefender Reverse Engineering
294. Switch as Binary Search, Part 1
295. Switch as Binary Search, Part 0
296. Qt Internals & Reversing
297. CVE-2006-5758: better late than ever
298. Malware and initial stack pointer value
299. Shared object injection on linux/unix
300. Bagle.W IDB
301. Trojan.Zhelatin.pk
302. Hotpatching MS08-067
303. Analyzing local privilege escalations in win32k
304. Exploiting Tomorrow's Internet Today: Penetration testing with IPv6
305. Can you find me now? Unlocking the Verizon Wireless xv6800 (HTC Titan) GPS
306. VbPython 1.2a
307. examples of the syllabuses
308. Using dual-mappings to evade automated unpackers
309. Interesting Kernel32 Constant
310. On Analysis of Client-Server Software Applications
311. Analyzing Malicious PDF's
312. The Wild World of VoIP
313. RE-courses/conferences schedule
314. custom gpa spy
315. Debugger Detection Via NtSystemDebugControl
316. POP SS and Debuggers
317. Fighting Oreans' VM (code virtualizer flavour)
318. PEiD imports parsing DoS
319. Nucleus Framework
320. SoftICE and KDExtensions
321. IDA2PAT Reloaded
322. Black Hat 2008 Wrap-up
323. Part 2: Introduction to Optimization
324. Part 3: Optimizing and Compiling
325. Part 1: Bytecode and IR
326. VMProtect, Part 0: Basics
327. Inside DeleteFiber() as Anti Debug Trick
328. Something different part 3, or not quite different
329. Why hooking system services is more difficult (and dangerous) than it looks
330. Inside SetUnhandledExceptionFilter
331. Small Devices & RCE
332. IDA on iPhone
333. SymbolFinder
334. Sun VirtualBox Disassembler Explantation
335. CartellaUnicaTasse.exe Italian Malware RCE Analysis
336. Why is secure development so important?
337. pde/pte softice plugin
338. Funny coded malware
339. antisptd
340. IceProbe - SoftIce Command Tracer
341. build rule for x64 asm
342. nonintrusive tracer on x64
343. My "Unofficial" ReCon Video
344. Strong-Name Signing, AdmiralDebilitate v0.1
345. IDA Pro Development Environment
346. Control Flow Deobfuscation Part 3
347. Vmware snapshot and SSDT
348. Phoenix Protector 1.3.0.1
349. .NET Internals and Native Compiling
350. Fujitsu 3D Shock Sensor Application Reversing
351. An Introduction To .NET Reversing
352. IDA and vmread/vmwrite x64
353. Intel VT and cpuid break
354. Downloader.Win32.Small or Win32/PolyCrypt Reversing
355. #773: bug in IDA-Pro [fails to debug zero-based PE]
356. "Function String Associate" IDA Plug-in
357. # old CD 03 bug in windows
358. # thinking in IDA Pro - how to obtain a copy
359. # bug in Process Explorer (a gift for malware)
360. # other solutions: how to load two or more files into the same IDA-Pro database
361. # how to load two or more files into single IDA Pro database
362. # Syser causes BSOD
363. # eternal life, ammo, scores in games
364. # free IDA-Pro training
365. # turbo-import [stealth anti-api-monitors style]
366. # bug in Olly, Windows behavior and Peter Ferrie
367. .NET Internals and Code Injection
368. D3DLookingGlass v0.1
369. DisasMSIL and CFF Explorer
370. Retsaot is Toaster, Reversed: Quick 'n Dirty Firmware Reversing
371. My next 2 articles
372. A brief discussion of Windows Vista’s IE Protected Mode (and user/process level secur
373. Rebel.NET
374. Integer overflow
375. Control Flow Deobfuscation Part 2
376. Programming against the x64 exception handling support, part 1: Definitions for x64 v
377. Frame pointer omission (FPO) optimization and consequences when debugging, part 2
378. Frame pointer omission (FPO) optimization and consequences when debugging, part 1
379. The kernel object namespace and Win32, part 3
380. The kernel object namespace and Win32, part 2
381. Debugger tricks: API call logging, the quick’n'dirty way (part 3)
382. The kernel object namespace and Win32, part 1
383. Programming against the x64 exception handling support, part 2: A description of the
384. Programming against the x64 exception handling support, part 3: Unwind internals (Rtl
385. Programming against the x64 exception handling support, part 4: Unwind internals (Rtl
386. Programming against the x64 exception handling support, part 5: Collided unwinds
387. Programming against the x64 exception handling support, part 6: Frame consolidation u
388. Programming against the x64 exception handling support, part 7: Putting it all togeth
389. Debugger tricks: API call logging, the quick’n'dirty way (part 1)
390. Debugger tricks: API call logging, the quick’n'dirty way (part 2)
391. Few words about Kraken
392. Introduction to x64 debugging, part 1
393. Introduction to x64 debugging, part 2
394. Introduction to x64 debugging, part 3
395. Introduction to x64 debugging, part 4
396. Introduction to x64 debugging, part 5
397. x64 Debugging Review
398. Using SDbgExt to aid your debugging and reverse engineering efforts (part 1).
399. SDbgExt extensions - part 2.
400. Useful WinDbg commands: .formats
401. Debugger commands review
402. Useful debugger commands: .writemem and .readmem
403. SDbgExt 1.09 released (support for displaying x64 EH data)
404. Debugger flow control: More on breakpoints (part 2)
405. Removing kernel patching on the fly with the kernel debugger
406. Beware of stack usage with the new network stack in Windows Vista
407. Remote debugging with process servers (dbgsrv)
408. Reverse debugging -server and -remote
409. Win32 calling conventions: __thiscall in assembler
410. Overview of WinDbg remote debugging
411. Win32 calling conventions: __stdcall in assembler
412. Win32 calling conventions: Concepts
413. Remote debugging with kdsrv.exe
414. Remote debugging review
415. Win32 calling conventions: __fastcall in assembler
416. Activating process servers and connecting to them
417. Ollydbg v1.10 and 6E/6F/A6 opcodes, a little oversight
418. Securing -server and -remote remote debugging sessions
419. Remote debugging with -server and -remote
420. Remote debugging with KD and NTSD
421. Remote debugging with remote.exe
422. Win32 calling conventions: Usage cases
423. Win32 calling conventions: __cdecl in assembler
424. Tracing Over System Calls In OllyDbg
425. DynLogger
426. Some functions are neater than the decompiler thinks
427. Self-modifying TLS callbacks
428. Symbian debugger
429. Trojan-PSW.Win32.OnLineGames.eos Reversing
430. Compiler 1, X86 Virtualizer 0
431. IDA disasms reserved opcodes, is it a bug?
432. Weird export forwarding thanks to Vista x64 SP1
433. Symbian AppTRK
434. Inside Session 0 Isolation and the UI Detection Service - Part 2
435. Process Memory Dumper for Credentials Disclosure Vulns
436. Cross Your T's and Dot Your Filenames
437. Hello Symbian!
438. (Part 2 of .NET native exe insights)Serial fishing and patching .NET exes with Ollydb
439. Rebuilding native .NET exes into managed .NET exes by Exploiting lefotver IL...
440. Some Quick Insights Into Native .NET exe's (part 1 of?)
441. Reverse Engineering Position- TS/SCI Required
442. Symbol Type Viewer 32Bit/64Bit v1.0.0.3
443. Inside Session 0 Isolation and the UI Detection Service - Part 1
444. Non-continuable exception trick
445. Something different part 2
446. New Hex-Rays Demo
447. Different versions of Windows kernel structures
448. gee mail patented algorithm
449. Pythonic way
450. Running Win32 program ASAP after Nt boot
451. hm
452. Re: RtlRemoteCall
453. Alignment check
454. Working? with protected processes in NT 6
455. Microsoft's Rich Signature (undocumented)
456. Tricky jump tables
457. Reverse Engineering the flash virtual machine
458. Collaborative RCE Tool Library (CRCETL) site update
459. Two Extensions added into Collaborative RCE
460. Why does every heap trace in UMDH get stuck at "malloc"?
461. SoftICE Installation.
462. Easy structure types
463. Eeye BinDiffing Trick
464. Industrial-Grade Binary-Only Profiling and Coverage
465. Refreshing the Taskbar Notification Area
466. Idc script and stack frame variables length
467. Shellcode Analysis
468. Array Indexing Quirk
469. SpyShredder Malware Spammed on OpenRCE
470. MRXDAV.SYS and Hex-Rays Decompiler
471. Shellcoding on Windows: Part II - Stack Overflow Problems
472. Updated ExtraPass plug-in 2.1, and APIScan
473. dr7.gd on mp systems running sice
474. PE Validator Script
475. Thread Optimization Checks : Code Prominence
476. Run-time determination of VC++ virtual member function addresses: Take II
477. Immunity Debugger v1.4
478. Debugger and process memory
479. KeGetCurrentIrql can't return HIGH_LEVEL
480. aMSN Input Validation Error
481. Direct3D 9 Hook v1.1
482. Jump tables
483. Something different
484. Shellcoding on Windows: Part I
485. An Objective Analysis of the Lockdown Protection System for Battle.net
486. ActiveX - Active Exploitation
487. Improving Software Security Analysis using Exploitation Properties
488. Context-keyed Payload Encoding
489. FPU Tracer v0.0.1 released
490. .NET unpackme
491. softice nmi hook
492. ScTagQuery: Mapping Service Hosting Threads With Their Owner Service
493. Virtual Machine detection method cd.
494. Old new Virtual Machine detection method.
495. Compiler Optimizations Regarding Structures
496. HP printer and cpu at 100%
497. Again on Visual Basic
498. Binary Search in Large-Scale Structure Recovery
499. GUID-Finder IDA Plug-in
500. Explorer Suite III (CFF Explorer VII)

Powered by vBulletin® Version 4.1.9 Copyright © 2012 vBulletin Solutions, Inc. All rights reserved.