I just published my first step-by-step reverse engineering/game patching tutorial using Ghidra, x64dbg, and Python. I tried to make it fun & balance the technical aspects for newcomers to RE. I really hope it helps someone here. Feedback is appreciated.
🗣0xFF0F
I nearly stopped watching instantly when you said "everybody in Cyber", but I stuck with it and really enjoyed it :) You're a natural teacher, I'm sure this will be a go-to video for many people getting into RE. Good job!
👤mrverybored
This is really good, already shared it with my ctf teams
👤cents02
🎖@malwr
🗣0xFF0F
I nearly stopped watching instantly when you said "everybody in Cyber", but I stuck with it and really enjoyed it :) You're a natural teacher, I'm sure this will be a go-to video for many people getting into RE. Good job!
👤mrverybored
This is really good, already shared it with my ctf teams
👤cents02
🎖@malwr
YouTube
Reverse Engineering/Game Patching Tutorial: Full Res RollerCoaster Tycoon with Ghidra+x64dbg+Python
GitHub Repo: https://github.com/jeFF0Falltrades/Game-Patches/tree/master/rct_full_res
Time Markers:
00:00:00 - Introduction
00:01:57 - Target audience and caveats note
00:03:10 - Start of tutorial
00:07:08 - Loading the file into Ghidra/First steps of RE…
Time Markers:
00:00:00 - Introduction
00:01:57 - Target audience and caveats note
00:03:10 - Start of tutorial
00:07:08 - Loading the file into Ghidra/First steps of RE…
Reversing Go - Part 2
🗣digicat
This can and should be great content, but it is written poorly imo. Almost like a manual. No engagement for the reader, not even an introduction (not even for the first part), mostly spewed assembly with assumptions and explanations. Some people might be into this though, so thanks!
👤saudi_hacker1337
🎖@malwr
🗣digicat
This can and should be great content, but it is written poorly imo. Almost like a manual. No engagement for the reader, not even an introduction (not even for the first part), mostly spewed assembly with assumptions and explanations. Some people might be into this though, so thanks!
👤saudi_hacker1337
🎖@malwr
Beginners: Here is an Easy-To-Use Packet Sniffing Tool
Espionage: A Network Packet and Traffic Interceptor For Linux. Spoof ARP & Wiretap A Network.
https://github.com/DoubleThreatSecurity/Espionage
Espionage is a network packet sniffer that intercepts large amounts of data being passed through an interface. The tool allows users to to run normal and verbose traffic analysis that shows a live feed of traffic, revealing packet direction, protocols, flags, etc. Espionage can also spoof ARP so, all data sent by the target gets redirected through the attacker (MiTM). Espionage supports IPv4, TCP/UDP, ICMP, and HTTP. Espionage was written in Python 3.8 but it also supports version 3.6.
🗣overflow1n
🎖@malwr
Espionage: A Network Packet and Traffic Interceptor For Linux. Spoof ARP & Wiretap A Network.
https://github.com/DoubleThreatSecurity/Espionage
Espionage is a network packet sniffer that intercepts large amounts of data being passed through an interface. The tool allows users to to run normal and verbose traffic analysis that shows a live feed of traffic, revealing packet direction, protocols, flags, etc. Espionage can also spoof ARP so, all data sent by the target gets redirected through the attacker (MiTM). Espionage supports IPv4, TCP/UDP, ICMP, and HTTP. Espionage was written in Python 3.8 but it also supports version 3.6.
🗣overflow1n
🎖@malwr
GitHub
DoubleThreatSecurity/Espionage
A Network Packet and Traffic Interceptor For Linux. Spoof ARP & Wiretap A Network. - DoubleThreatSecurity/Espionage
Simple Ring-3 Rootkit To Hide Malware From The Windows Task Manager
https://github.com/josh0xA/HookTaskmgr
🗣overflow1n
🎖@malwr
https://github.com/josh0xA/HookTaskmgr
🗣overflow1n
🎖@malwr
GitHub
josh0xA/ring3-kit
Hides Process From Task Manager Using NT API Hooking (NtQuerySystemInformation) - josh0xA/ring3-kit
Undocumented user account in Zyxel products (CVE-2020-29583)
🗣digicat
🤬 “According to Zyxel, the account was designed to deliver automatic firmware updates for access points via FTP.”
👤1128327
🎖@malwr
🗣digicat
🤬 “According to Zyxel, the account was designed to deliver automatic firmware updates for access points via FTP.”
👤1128327
🎖@malwr
GetPerms: An Android library to see permissions granted to (and requested by) an app, its installation date, and more!
🗣0x4f0x770x610x690x73
🎖@malwr
🗣0x4f0x770x610x690x73
🎖@malwr
GitHub
GitHub - 4f77616973/GetPerms: An Android wrapper library to quickly get app permissions and other package data.
An Android wrapper library to quickly get app permissions and other package data. - GitHub - 4f77616973/GetPerms: An Android wrapper library to quickly get app permissions and other package data.
Overthewire: Learn Hacking By Playing Games
🗣spectnullbyte
Cool! Thanks for sharing this!
👤AtlanticDipper
🎖@malwr
🗣spectnullbyte
Cool! Thanks for sharing this!
👤AtlanticDipper
🎖@malwr
Medium
Overthewire, Learn Hacking By Playing Games
If you’ve spent enough time on the web searching for practical resources to learn how to hack, then you should know by now what a hustle…
Wine release 6.0
🗣barcelona_temp
The Wine team is proud to announce that the stable release Wine 6.0 is now available.
This release represents a year of development effort and over 8,300 individual changes. It contains a large number of improvements that are listed in the release notes below. The areas of major changes are:
- Core modules in PE format.
- Vulkan backend for WineD3D.
- DirectShow and Media Foundation support.
- Text console redesign.
🎖@malwr
🗣barcelona_temp
The Wine team is proud to announce that the stable release Wine 6.0 is now available.
This release represents a year of development effort and over 8,300 individual changes. It contains a large number of improvements that are listed in the release notes below. The areas of major changes are:
- Core modules in PE format.
- Vulkan backend for WineD3D.
- DirectShow and Media Foundation support.
- Text console redesign.
🎖@malwr
Program modification via reassembling
🗣CrazyJoe221
That right there is awesome
👤crtzrms
Paper: https://arxiv.org/abs/1906.03969
👤CrazyJoe221
🎖@malwr
🗣CrazyJoe221
That right there is awesome
👤crtzrms
Paper: https://arxiv.org/abs/1906.03969
👤CrazyJoe221
🎖@malwr
GitHub
GitHub - GrammaTech/ddisasm: A fast and accurate disassembler
A fast and accurate disassembler. Contribute to GrammaTech/ddisasm development by creating an account on GitHub.
Robust Indicators of Compromise for SUNBURST
🗣jonas02
> Dont trust everything you read!
gotta love the irony there
👤shbooms
Interesting, thx
👤Rico_The_packet
🎖@malwr
🗣jonas02
> Dont trust everything you read!
gotta love the irony there
👤shbooms
Interesting, thx
👤Rico_The_packet
🎖@malwr
Netresec
Robust Indicators of Compromise for SUNBURST
There has been a great deal of confusion regarding what network based Indicators of Compromise (IOC) SolarWinds Orion customers can use to self assess whether or not they have been targeted after having installed a software update with the SUNBURST backdoor.…
Hacking a game with DLL injection [Game Hacking 101](https://youtu.be/KCtLiBnlpk4)
🗣247ctf
I still play AOE2, and yes I know all the cheats. But this sounds fun to try.
👤m00nl16h76h0ul
no need to hack when you already know the cheat codes 😁
👤pein_of_wrath
🎖@malwr
🗣247ctf
I still play AOE2, and yes I know all the cheats. But this sounds fun to try.
👤m00nl16h76h0ul
no need to hack when you already know the cheat codes 😁
👤pein_of_wrath
🎖@malwr
YouTube
Hacking a game with DLL injection [Game Hacking 101]
Implementing a game hacking trainer for Age of Empires by using Dynamic Link Library (DLL) injection. The injected DLL enables the player to toggle the "reveal map" and "no fog" cheat codes on and off by pressing the F6 key.
DLL injection is a useful technique…
DLL injection is a useful technique…