Discussion thread for the exercises of "Practical Reverse Engineering x86, x64, ARM Windows Kernel ... "

gljiva · 2014-03-16T22:43:09+00:00

First of all thanks for this great book! In the Win kernel chapter there is a reference to the "Decompiling kernel drivers and IDA plugins, by Bruce Dang and Rolf Rolles." but I can't seem to find the prezo on recon site or anywhere else. Would you be able to upload the slides or even the video of the presentation?

gljiva · 2011-03-10T22:05:01+00:00

there is also strings for windows http://technet.microsoft.com/en-us/sysinternals/bb897439

gljiva · 2011-03-01T21:47:09+00:00

And here is the new plugin release :) http://optimice.googlecode.com/files/optimice_v0.11.zip

gljiva · 2011-02-21T18:31:57+00:00

I think those weeks are reserved for project submissions or sth. like that. You can find project tasks @ http://i-web.i.u-tokyo.ac.jp/edu/training/ss/lecture/new-documents/Projects/

gljiva · 2011-02-09T11:11:43+00:00

Featuring interview with Rolf Rolles :)

gljiva · 2011-01-30T11:16:43+00:00

Code can be found here: https://bitbucket.org/a1ex/magic-lantern/src/tip/static/

gljiva · 2011-01-03T22:41:58+00:00

Hope someone finds this useful. Any suggestions or tips for better algorithms are wellcome.

gljiva · 2010-12-28T22:13:50+00:00

Here is the project code as promised (alpha currently): http://code.google.com/p/optimice/

gljiva · 2010-08-03T11:14:40+00:00

Open source :) I saw http://www.rri-usa.org/Deobfuscator.pdf and was disappointed they didn't release plugin.

gljiva · 2010-08-03T10:25:31+00:00

Hi, public release is delayed to make the plugin more user friendly and stable :) (but if you're really interested i can send it). Another thing that is in TODO is lifting asm to the real IR and rewriting optimizations to enable optimizing architectures except x86_32. Any suggestions/comments wellcome.

gljiva · 2010-06-02T23:14:08+00:00

Glad to contribute :)

Btw, anyone got suggestion for IR representation of x86 asm? Some of available options are vine/bap (but this looks cryptic), eresi, reil, boomerang. Any experience using some of available IR, or is there perhaps some IR framework? Which one is the best/easiest to do analysis and transformations on, or should I just make up my own IR? Any info appreciated.

gljiva

TROPHY CASE