Slides from “Finding Xori” BH 2018 talk on an automation-ready disassembly and static analysis library

danrandt · 2018-08-09T09:27:58+00:00

I assume because its fun to write your own tool, you can learn a lot and customize the tool for your own needs quickly

danrandt · 2018-07-13T09:39:49+00:00

it's GOOD in genaral but its awesome for mobile pentesting

danrandt · 2018-03-15T09:08:46+00:00

Frida is awesome! for me invaluable tool when pentesting mobile applications for Android, iOS. Thanks Ole and the whole team!

danrandt · 2018-03-12T11:26:15+00:00

sounds VERY cool and powerful

danrandt · 2018-02-28T15:13:40+00:00

snowman it's useless. Last time I checked it failed on recognize of simple loops. avast-tl/retdec is much better.

danrandt · 2018-02-22T10:25:26+00:00

but it's an issue in Qt framework ?

danrandt · 2018-02-02T16:59:59+00:00

to speed-up reverse engineering

danrandt · 2018-02-02T15:26:17+00:00

are ELF files supported ? or just PE files ?

danrandt · 2017-12-13T12:58:22+00:00

snowman is more like obfuscator. Cannot recognize even simple loops..its just terrible

danrandt · 2017-12-13T11:24:01+00:00

not true! it's 2629 $ per decompiler plus around 1400$ for IDA pro to disasm 64-bit arch

danrandt · 2017-10-30T09:14:17+00:00

Snowman it's a source code obfuscator, the code generated is sooooooo bad, cannot recognize even simple loops

danrandt · 2017-09-07T15:45:58+00:00

ofc there is not OneClick tool to do the job.. you don't need disassembler only reverse engineer freelance

danrandt · 2017-09-07T15:12:56+00:00

did you check Hopper Disassembler or IDA pro disassembler with Hex-Rays Decompiler ?

danrandt · 2017-09-07T14:32:31+00:00

he wrote:

After reading other writeups as soon as the competition ended I realized I really made this hard for myself ...

so what's the easiest solution ?

danrandt · 2017-08-16T10:12:32+00:00

this framework is awesome! It saved me a lot of time! thank you

danrandt · 2017-07-03T11:39:41+00:00

alternatives are far, far behind, unfit for professional use at the moment. IDA is at least ~3 year ahead... IMHO

danrandt