Surprise, I ported Windows Defender to Linux. 
https://github.com/taviso/loadlibrary …
-
Can this load PE *executables* if I manually search for/provide symbols? Last time I had to one-off that I used mmap w/ hardcoded offsets...
-
-
Yes, that would work - I find the process of porting and making sure all the imports work useful for reversing, get a feel for the flow etc.
-
Nice. My use case at the time was white-box AES; easily defeatable (key extraction) if you can surgically hijack execution.
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.