Reverse Engineering

Professionally Evil Fundamentals: Introduction

Solving the November 13th Detective Nevil Mystery Challenge

| | .gdb, ARM, ASM, challenge, debug, debugging, Detective Nevil Mystery Challenge, Linux, payload, Penetration Testing, Professionally Evil, programming, Pwntools, Reverse Engineering, Write-up
Overview Each week on Friday, we post a social media challenge known as “Detective Nevil Mystery Challenge”.  On November 13th of 2020, we released a challenge that contained a payload and it ...
Professionally Evil Insights
Not-So-Random: LD_PRELOAD to Hijack the rand() Function to Control The Generation of Random Numbers

Not-So-Random: Using LD_PRELOAD to Hijack the rand() Function

| | C++, Hijack, ld, LD_PRELOAD, libc, Linux, Penetration Testing, Professionally Evil, programming, Reverse Engineering, Shared Objects
    Today I wanted to continue the series on using LD_PRELOAD.  In today’s post we are going to use LD_PRELOAD to hijack the rand() function in a simple random number guessing game to ...
Professionally Evil Insights
Professionally Evil Fundamentals: Introduction

LD_PRELOAD – Introduction

| | C++, debug, Hijack, ld, LD_PRELOAD, libc, Linux, Penetration Testing, Professionally Evil, programming, Reverse Engineering, rootkit, Shared Objects, training
    Today I wanted to start what I plan to be a small series of blog posts about LD_PRELOAD. LD_PRELOAD is related to Linux based systems and revolves around the loader system and ...
Professionally Evil Insights
A Malware Researcher’s Guide to Reversing Maze Ransomware

A Malware Researcher’s Guide to Reversing Maze Ransomware

| | Anti-Malware Research, Maze, Ransomware, Reverse Engineering, Whitepapers
At the end of May 2019, a new family of ransomware called Maze emerged into the gaping void left by the demise of the GandCrab ransomware. Unlike run-of-the-mill commercial ransomware, Maze authors ...
Bitdefender Labs

Video: All Things CTF!

| | 2019, Crypto, ctf, doyle, EH-Net Live!, highlight, Reverse Engineering, webapp
Find Fame, Fortune and Fun with CTFs! Video and Slide Deck from EH-Net Live! November 2019 Games are fun. They’re meant to be that way. Games can also teach us valuable lessons ...
The Ethical Hacker Network

Webinar: All Things CTF!

| | 2019, ctf, EH-Net Live!, highlight, pentest, Reverse Engineering, webapp
Register Now to Find Fame, Fortune and Fun with CTFs! Capture the Flag is a game that can teach valuable lessons in teamwork, strategy, agility and endurance. The equivalent in the hacking ...
The Ethical Hacker Network
Image Credit: Paul Scherrer Institute - Ptychographic X-ray Laminography

Reverse Engineering Intellectual Property: Chip Ptychographic X-ray Laminography

| | Hardware Secrets, Hardware Security, Information Security, Intellectual Property, Reverse Engineering
Image Credit: Paul Scherrer Institute - Ptychographic X-ray Laminography via Samuel K. Moore - writing for IEEE Spectrum Magazine - comes this outstanding article published on October 7th, 2019; in which, Mr ...
Infosecurity.US
EH-Net - Book Review - Malware Data Science - Neural Net Learning

Book Review: Malware Data Science

| | book review, Book Reviews, data science, highlight, machine learning, Malware, neural networks, Reverse Engineering
“Malware Data Science: Attack Detection and Attribution” (MDS) is a book every information security professional should consider reading due to the rapid growth and variation of malware and the increasing reliance upon ...
The Ethical Hacker Network

Crack Me Challenge Part 4

| | crackme, feature, Reverse Engineering
First we must take a look at the following piece of code that will be presented in the code segment 5: 004017FC |. B8 40000000 mov eax,40 00401801 |. 33C9 xor ecx,ecx ...
InfoSec Resources
Reversing malware in a custom format: Hidden Bee elements

Reversing malware in a custom format: Hidden Bee elements

| | custom malware, hidden bee, hidden bee miner, Malware, payload, Reverse Engineering, reversing malware, Threat analysis
When we recently analyzed payloads related to Hidden Bee (dropped by the Underminer EK), we noticed something unusual. After reversing the malware, we discovered that its authors actually created their own executable ...
Malwarebytes Labs
Load more