GDB input radix option
You can see code like this in GDB: 0x3001ce2b : movzx edx,BYTE PTR [ebp-80] <- 80 is decimal 0x3001ce2f :…
Must have tools
A work in progress list… Otx – Graphical frontend for otool, the disassembler. http://otx.osxninja.com/ Burp Suite, Paros, Webscarab – web…
Enforcing the Law at the Mid Atlantic Collegiate Cyber Defense Competition (MACCDC)
The MidAtlantic Collegiate Cyber Defense Competition (MACCDC) is one of the many regional CCDCs that includes a somewhat unique aspect:…
Exploring the Labyrenth (2017 Edition)
2017 brings us one of the best, though newest, CTFs: Palo Alto’s LabyREnth.The 2016 iteration was a grueling set of…
Running the Labyrenth: Unit 42 CTF
At least once a year I try to publish my work process for a Capture The Flag (CTF) event. If…
GrrCon 2015 – Memory Forensics – Grabbing all the Flags…
Today we bring you a special guest posting by Tony “@captcook32” Cook. Late last year GrrCon hosted their anticipatory excellent…
Of Malware and Adware: Why Forbes Did Not Serve Me Malware
The topic of web-based advertising is always a hot topic for discussion, debate, and outright argument. One realizes that the…
Creating a Malware Sandbox in Seconds with Noriben.
Happy New Years! As part of the new year, let’s make an effort to make your defensive posture better, especially…
Solving the 2015 FLARE On Challenges
The second annual FLARE On is a reverse engineering challenge put forth by the FireEye Labs Advanced Reverse Engineering (FLARE). While…
DJ Forensics: Analysis of Sound Mixer Artifacts
In many forensics examinations, including those of civil and criminal nature, there is an art to finding remnants of previously…