Protected: FlareOn 11 – Task 9 ← Flare-On 11 – Task 10Protected: FlareOn 11 – Task 9... 2024-10-29 18:24:23 | 阅读: 10 | 收藏 | hasherezade's 1001 nights - hshrzd.wordpress.com hasherezade flare flareon tagged bookmark

Protected: Flare-On 11 – Task 10 ← Magniber ransomware analysis: Tiny Tracer in actionProtected: Flare-O... 2024-10-27 23:34:26 | 阅读: 10 | 收藏 | hasherezade's 1001 nights - hshrzd.wordpress.com hasherezade magniber analysis tracer tiny

Magniber ransomware analysis: Tiny Tracer in action IntroMagniber is a ransomware that was initially targeting South Korea. My first report... 2023-3-31 03:39:28 | 阅读: 46 | 收藏 | hasherezade's 1001 nights - hshrzd.wordpress.com 14bd0000 4ee shellcode magniber

Flare-On 9 – Task 8 For those of you who don’t know, Flare-On is an annual “reverse engineering marathon” organi... 2022-11-12 23:19:46 | 阅读: 13 | 收藏 | hshrzd.wordpress.com domainslist tokenfor flared flare memberinfo

Flare-On 9 – Task 9 For those of you who don’t know, Flare-On is an annual “reverse engineering marathon” organi... 2022-10-10 12:15:17 | 阅读: 13 | 收藏 | hshrzd.wordpress.com byref chacha sub1 int128 putc

Flare-On 9 – Task 10 For those of you who don’t know, Flare-On is an annual “reverse engineering marathon” organi... 2022-10-10 11:26:16 | 阅读: 8 | 收藏 | hshrzd.wordpress.com nena song vmac flare rom

Ida tips: how to use a custom structure Ida tips: how to use a custom structureApplying custom structu... 2022-2-9 22:58:45 | 阅读: 35 | 收藏 | hshrzd.wordpress.com windows tips pressing bookmark

Python scripting for WinDbg: a quick introduction to PyKd PyKd is a plugin for WinDbg allowing to deploy Python scripts . It can be very helpful i.e.... 2022-1-7 01:29:26 | 阅读: 46 | 收藏 | hshrzd.wordpress.com pykd python windbg library download

Flare-On 8 – Task 6 Flare-On is an annual “reverse engineering marathon” organized by Mandiant (formerly by Fire... 2021-10-24 02:19:01 | 阅读: 52 | 收藏 | hshrzd.wordpress.com me0w applying pa30 delta d0

Flare-On 8 – Task 7 Intro:The task is a Windows executable, 32-bit.When we run the application, the f... 2021-10-23 09:05:00 | 阅读: 46 | 收藏 | hshrzd.wordpress.com 1747b490000 6ad flare 19a9d4

Flare-On 8 – Task 9 The 9-th is named “evil”, and the description says:As mentioned, it comes with severa... 2021-10-23 09:05:00 | 阅读: 24 | 收藏 | hshrzd.wordpress.com ws2 nping debugger 4356

Protected: Flare-On 7 – Task 10 [coming soon] ← Flare-On 7 – Task 9Protected: Flare-On 7 – Task 10 [coming soon]... 2021-01-05 07:21:19 | 阅读: 125 | 收藏 | hshrzd.wordpress.com flare hasherezade programmer bookmark

Protected: FlareOn 7 – Task 9 ← Flare-On 6 (tasks 10-12)Protected: FlareOn 7 – Task 9... 2020-12-13 02:25:54 | 阅读: 182 | 收藏 | hshrzd.wordpress.com hasherezade flare programmer bookmark

Flare-On 6 (tasks 10-12) Flare-On 6Flare-On Challenge is an annual competition organized by FireEye (the FLARE team).... 2019-09-30 09:04:09 | 阅读: 87 | 收藏 | hshrzd.wordpress.com volatility imports flare d7 mugatu

Application shimming vs Import Table recovery In this post I am sharing a case that I investigated recently, during the tests of my applica... 2019-06-28 01:37:32 | 阅读: 78 | 收藏 | hshrzd.wordpress.com sieve imports imp messageboxa apphelp

PE-bear – version 0.3.9 available [UPDATE] This release introduced some stability issues, fixed in 0.3.9.5Hello! Several month... 2019-01-13 08:33:43 | 阅读: 195 | 收藏 | hshrzd.wordpress.com bear windows permalink calculated verifies

How to compile a PIN tool using Visual Studio 2017 How to compile a PIN tool using Visual Studio 2017UPDATE: the d... 2018-07-16 11:02:40 | 阅读: 77 | 收藏 | hshrzd.wordpress.com crtbegins tracer xed windows compiling

PE-bear – version 0.3.8 available PE-bear – version 0.3.8 availableIt has been a long time since... 2018-04-04 10:45:55 | 阅读: 82 | 收藏 | hshrzd.wordpress.com bear 64bit incorrect mantainance

White Rabbit crackme! White Rabbit crackme!UPDATE: We already got the three winners.... 2018-02-03 07:20:16 | 阅读: 89 | 收藏 | hshrzd.wordpress.com writeups contest rabbit reward winners

Unpacking a malware with libPeConv (Pykspa case study) In one of the recent episodes of “Open Analysis Live!” Sergei demonstrated how to statically... 2018-01-29 08:04:11 | 阅读: 83 | 收藏 | hshrzd.wordpress.com unpack blob2 blob1 ulonglong peconv