Ok that's way over my knowledge, have no clue..
New article on #reverseengineering #linux #malware using #radare2
Let me know what you guys think!https://medium.com/@201322c78cfc/48e349b252f9 …
-
-
-
What are you confused about? Maybe I can help
- Još 2 druga odgovora
Novi razgovor -
-
-
Awesome! Glad you liked it and that it was easy enough to understand for people new in the field!
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
-
-
I would use e scr.utf8=true also normally if you enable comments you would see the ASCII directly in the disassembly. You can also use ahi s @ the offset of the cmp. For the base 2 calculation you could use ? or rax2. And r2pipe with cmdj("aoj") for the script ;)
-
Yeah,I had some of the comments disabled for the sake of getting the pictures for the article. I did use rax2 for a lot of things too, but didn't mention it as I went over it in other articles. Thanks for the tips though, will keep them in mind for next analysis!
Kraj razgovora
Novi razgovor -
-
-
Very cool
-
Thank you!
Kraj razgovora
Novi razgovor -
-
-
Use
@radareorg instead of#radare2 to tag article ;) -
Ah, ok. Will do next time!
Kraj razgovora
Novi razgovor -
-
-
This was fun to see into. I love just about everything that uses radare2. However I don't think this shows why homebrew encryption is a bad idea. If this had a more well-known block cipher with a baked-in key, it would be just as reversible.
-
If anything, I would call what this is doing "obfuscation".
- Još 1 odgovor
Novi razgovor -
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.