How to compile GDB for iOS! One obstacle that I faced long time ago and came again into spotlight is how to reco... 2012-04-17 07:50:43 | 阅读: 40 | 收藏 | reverse.put.as defs iphoneos crt1 darwinbuild sdks

gdbinit v8.0: simultaneous support for x86/x86_64 and ARM architectures! Here it is, a merge between the x86 and ARM versions of gdbinit. The only inconvenie... 2012-04-14 07:49:51 | 阅读: 39 | 收藏 | reverse.put.as gdbinit 64bits enjoy gdbinit8 32bits

Dynamic Code Encryption in OS X: the crackme example! The title of this post is a partial rip-off of Dynamic Code Encryption as an Anti Du... 2012-03-18 07:41:32 | 阅读: 41 | 收藏 | reverse.put.as salt salsa protectsize 0x37 mymach

A small improvement to OS X “rootkitery”: bruteforcing sysent discovery, fast & easy! I love to read about the Human brain and yesterday I was feeling weird about this th... 2012-02-15 07:40:53 | 阅读: 40 | 收藏 | reverse.put.as sysent bruteforce idt irc 0m0

AV-monster: the monster that loves yummy OS X anti-virus software Welcome to another “silly” evil idea that abuses bad design decisions, bad implement... 2012-02-14 07:39:52 | 阅读: 56 | 收藏 | reverse.put.as kauth monster listeners userland c7

Obfuscation #2: Playing entrypoint hide & seek game with dyld Load command 9 cmd LC_UNIXTHREAD cmdsize 80 flavor i386_THREAD_STAT... 2012-02-08 07:38:18 | 阅读: 39 | 收藏 | reverse.put.as dyld 0x00000000 picbase movl 8fe01030

A little more fun with Mach-O headers: adding and spoofing a constructor The fun with Mach-O headers continues, this time with a “simple” trick to inject a n... 2012-02-07 07:36:35 | 阅读: 35 | 收藏 | reverse.put.as dyld sect initializer

Anti-disassembly & obfuscation #1: Apple doesn’t follow their own Mach-O specifications? I smile when I think about this “feature”! I liked it so much that things got out of... 2012-02-03 07:34:54 | 阅读: 35 | 收藏 | reverse.put.as machfile kern manglemacho bsd assumption

Anti-debug trick #1: Abusing Mach-O to crash GDB I developed this funny trick while trying to find a solution for a problem in a proj... 2012-02-01 07:33:45 | 阅读: 37 | 收藏 | reverse.put.as lc software otool somewhere darwin

We have a crackme winner!!! This Sunday I received a valid keygen solution for my crackme. Congratulations to th... 2012-02-01 07:32:57 | 阅读: 32 | 收藏 | reverse.put.as keygen sunday reverser brain stops

My first crackme... from hell, I hope :-) My first OS X crackme is finally ready, after a long wait and some unnecessary teasi... 2012-01-25 07:32:11 | 阅读: 36 | 收藏 | reverse.put.as fg reversing aslr nr1 newer

A Mac OS X port of Phrack’s CheckIDT util by kad, or another way to retrieve sysent address This is a OS X port of kad’s checkidt utility featured at Phrack #59. It requires /d... 2012-01-11 07:31:40 | 阅读: 38 | 收藏 | reverse.put.as sysent checkidtv1 idt kmem meaningless

gdbinit v7.4.4 – the skip command Here is a small update to gdbinit with a new command, skip.This command will skip o... 2012-01-11 07:31:05 | 阅读: 31 | 收藏 | reverse.put.as gdbinit gdbinit744 boring lldb invest

Some comments about plugin-alliance.com protection... It sucks, sort of!Let me rewind to the beginning.I was very curious about this one... 2012-01-10 07:30:25 | 阅读: 31 | 收藏 | reverse.put.as curious polling pa alliance

Merry Christmas, Happy New Year and some notes... Merry Christmas or whatever applies or not to your particular case, and much more im... 2011-12-19 07:28:48 | 阅读: 32 | 收藏 | reverse.put.as flashback papers applies rootkits hellais

Evil iTunes Plugins from Hell Let me start this with some sort of disclaimer. I do not support/condone stealing cr... 2011-11-23 07:27:31 | 阅读: 32 | 收藏 | reverse.put.as itunes m3u memory security damn

gdbinit v7.4.3 2011-11-05 07:26:55 | 阅读: 37 | 收藏 | reverse.put.as 64bits assemble colorized plouj gdbinit743

Display Mach-O headers plugin for IDA This is a simple plugin to display Mach-O headers inside IDA, something I miss from... 2011-11-04 07:25:45 | 阅读: 47 | 收藏 | reverse.put.as machoplugin workaround qt windows crash

How to create IDA C/C++ plugins with Xcode This is just a simple post about using Xcode to create IDA C/C++ plugins. Nothing fa... 2011-11-01 07:24:28 | 阅读: 36 | 收藏 | reverse.put.as xcode formsample library pmc idasdk

Using OS X TrustedBSD framework to protect critical files And here we are with a few spare minutes! My baby girl is a little cute devil who, l... 2011-10-28 07:23:31 | 阅读: 31 | 收藏 | reverse.put.as ice spoof girl