FinSpy VM Unpacking Tutorial Part 3: Devirtualization. Phase #1: Deobfuscating FinSpy VM Bytecode Programs [Note: if you've been linked here without context, the introduction to Part #3 describing its four p... 2018-02-22 06:15:04 | 阅读: 47 | 收藏 | www.msreverseengineering.com scratch memory finspy bytecode disassembly

FinSpy VM Unpacking Tutorial Part 3: Devirtualization This is the third and final part in my series on statically unpacking the FinSpy VM. After having de... 2018-02-22 06:14:59 | 阅读: 58 | 收藏 | www.msreverseengineering.com finspy bytecode machine

FinSpy VM Part 2: VM Analysis and Bytecode Disassembly This is part two of my three-part series on analyzing and de-virtualizing the FinSpy virtual machine... 2018-02-01 17:20:49 | 阅读: 57 | 收藏 | www.msreverseengineering.com vmcontext finspy thcontext seg000

The Synesthesia Shellcode Generator: Code Release and Future Directions Synesthesia is an idea that I published at EkoParty last year (slides and video are available) regar... 2017-07-18 01:42:30 | 阅读: 40 | 收藏 | www.msreverseengineering.com synesthesia shellcode machine loops

Synesthesia: Modern Shellcode Synthesis (Ekoparty 2016 Talk) Here are the slides and code for my recent presentation at Ekoparty 2016. The full abstract can be f... 2016-11-09 05:45:35 | 阅读: 35 | 收藏 | www.msreverseengineering.com shellcode slides synesthesia machine restriction