RCE on Reddit- REing a module of a hard drive's firmware? May 19, 2013
- Rendezvous: A Search Engine for Binary Code May 18, 2013
- How does anyone actually afford IDA? May 18, 2013
- Light and Dark side of Code Instrumentation [PDF] May 17, 2013
- UbiCrypt Summer School 2013 - Reverse Engineering May 16, 2013
- Introduction to Windows Kernel Security Research May 16, 2013
- NoSuchCon 2013 talks May 16, 2013
- GreHack 2013 - 2nd Call For Papers - November 15, Grenoble, France May 16, 2013
- Help with an app designed to work with another brand of action camera. (/r/hacking/ x-post) May 16, 2013
- Tools for memory visualization May 16, 2013
- OSNews
- * Why Google gets so much credit * May 18, 2013
- EA Sports developer calls Wii U 'crap' May 18, 2013
- NixOS May 18, 2013
- AIDE v2 adds C/C++ support May 18, 2013
- How Google updated Android without releasing version 4.3 May 17, 2013
Category Archives: Update
Preparing a bugfix version of CFF Explorer
It has been many years since the last update of what had started as a hobby side-project when I was 19. I’m sorry that I haven’t updated the CFF for such a long time, given that thousands of people use … Continue reading
CFF Explorer 7.9 & Secunia
Today I’ve received a Secunia report email about a buffer overflow vulnerability in the CFF Explorer. I was quite amused =). I mean, I usually get emails sent me by users about bugs in the CFF, never got an email … Continue reading
Rebel.NET & Phoenix Protector Update
Both suffered from a bug where they’d fail in case the assembly to reproduce/protect didn’t have a .rsrc section. Since at the time I wrote the code all .NET assemblies had a .rsrc section, I took it for granted and … Continue reading
CFF & Rebel.NET Update
Fixed some bugs in both applications. In particular, made some part of the CFF Explorer more robust. The current CFF Explorer still contains the core I wrote when I was 19yo. The newer kernel, which I don’t know if I’ll … Continue reading
CFF Explorer update: scripting arguments
Arguments can now be passed through command line just by making them follow the name of the script. E.g.: “CFF Explorer.exe” “C:\mydir\script.cff” arg1 arg2 “arg 3″ To access the arguments from the scripting part you can use the global variables … Continue reading
Filter Monitor 1.1.0: filter restore
Uploaded the new version of this little utility. Fixed some bugs (nothing serious). Now it has the capability to restore some types of filters that the user unregister. Basically, it can restore Create Process, Thread and Load Image callbacks.
Explorer Suite update
CFF Explorer: Improved support for tiny PEs. Fixed a bug in the Exception Directory which was due to the grid set up. Task Explorer: Fixed a minor bug on x64. Added the Driver List tool.
CFF Explorer bug-fix
Fixed a bug reported by icy. It was causing crashes in executables without sections when calculating their PE size.
Data Execution Prevention (NX) flag
As you probably know the DEP (Data Execution Prevention) was introduced in XPSP2 and it prevents code to be executed from data sections. Let’s consider this code snippet: unsigned char b = 0xC3; // ret int _tmain(int argc, _TCHAR* argv[]) … Continue reading