Statistics

Members: 1927
News: 293
Web Links: 1
Visitors: 3932461

Who's Online

We have 1 guest online
Damn Vulnerable LinuxDamn Vulnerable Linux (DVL) is a Linux-based (modified Damn Small Linux) tool for IT-Security & IT-Anti- Security and Attack & Defense. [CLICK HERE FOR MORE INFOS! ]

Featured Conference Video

T16-Recon2006-Joe_Stewart-OllyBonE.gif OllyBone - Semi-Automatic Unpacking on IA-32. View the conference video here!
Home arrow Articles - White Hat Methods arrow CodeBreakers Journalarrow Vol.3, No.2, 2006
Vol.3, No.2, 2006
CBJLogoJournalSmall.jpgThe CodeBreakers Journal deals with IT-Security & IT-Anti-Security and Attack & Defense. The CodeBreakers Journal is publishing articles after full peer review. All articles are published, without barriers to access, immediately upon acceptance. The CodeBreakers Journal is published frequently.

Writing buffer overflow exploits - a tutorial for beginners
Writing buffer overflow exploits - a tutorial for beginners [by Mixter]

Buffer overflows in user input dependent buffers have become one of the biggest security hazards on the internet and to modern computing in general. This is because such an error can easily be made at programming level, and while invisible for the user who does not understand or cannot acquire the...
Read More >>


A Study In Scarlet - Exploiting Common Vulnerabilities in PHP Applications
A Study In Scarlet - Exploiting Common Vulnerabilities in PHP Applications
A reprint of reminisces from the Blackhat Briefings Asia 2001.
Read More >>

Portable Executable File Format – A Reverse Engineer View
Portable Executable File Format – A Reverse Engineer View
This tutorial aims to collate information from a variety of sources and present it in a way which is accessible to beginners. Although detailed in parts, it is oriented towards reverse code engineering and superfluous information has been omitted.

Read More >>

Writing Loaders for DLLs - Theory and Techniques
Writing Loaders for DLLs - Theory and Techniques
Generally speaking several applications have a protection implemented into one of its Dlls. This is the case for example of out-of-the-shelf protectors used by developers, such as TimeLock, for which the protection checks are implemented into protected Dlls, stored in the Windows’ system32 folder....
Read More >>

Everything is Byte
Everything is Byte

Everything is byte. Of course, this won't sound SO strange to most of you. After all, everything which resides on a computer's HD, whether it is a sound, a movie or this plain text file, must be first converted to binary format. This takes us to some less obvious considerations: if everyt...
Read More >>


Adding Imports by Hand
Adding Imports by Hand
This is a tutorial about the imports i wrote "by the way" while solving a harder problem. It focus on 2 particular problems: Building up all the imports information and adding imports (both by hand). It does NOT touch the problem of reconstructing a dumped imports section but, hopefully,...
Read More >>

VX Reversing
VX Reversing

For many years, Virus Writers and Reverse Code Engineers have independently studied common topics. As a consequence, these two subjects have grown up as, apparently, unrelated disciplines. NOT ANY LONGER. This is the first of a serie of issues dealing with one of the most interesting topics in Rev...
Read More >>


How to Write Your Own Packer
How to Write Your Own Packer

Why write your own packer when there are so many existing ones to choose from? Well, aside from making your executables smaller, packing is a good way to quickly and easily obfuscate your work. Existing well-know packers either have an explicit 'unpack' function, or there are readily a...
Read More >>


Examining Viruses
Examining Viruses

Is it virii, or viruses? - Viruses. :) I have to admit, I am fascinated with virus programming. Not sure why, but I am always reading about them, reading up on how to defeat them, and even coding them for my own educational purposes. I decided to write this high-level overview of virii that m...
Read More >>


Virtual Machine Rebuilding
Virtual Machine Rebuilding

Virtual Machines are one of the most controversial protection methods used nowadays. I try to show how virtual machines are created by examining the full reversed source code of the VM used in the T2'06 challenge, worth $1'500. It explains how to code a VM and helps those who wanted to...
Read More >>


Reverse Engineering Backdoored Binaries
Reverse Engineering Backdoored Binaries

This paper is on reverse engineering backdoored binaries on an x86 Linux Operating System. It is meant for the beginner reverse engineer with some knowledge of ELF, C, x86 ASM, and Linux. We will begin by explaining the basics of our binary from what we can determine by disassembling and then ...
Read More >>


Self Modifying Code
Self Modifying Code

This article takes an in depth look at self modifying code (SMC) and how you can use it in your own applications. There are examples in C++ using inline assembly, as well as pure assembler. I also talk about executing code on the stack, which is essential to successfully write and execute SMC.
...
Read More >>


Processless Applications - Remotethreads on Microsoft Windows 2000, XP, and 2003
Processless Applications ­ Remotethreads on Microsoft Windows 2000, XP and 2003

The shown technique is able to run on all Windows operation systems. In order to avoid virus creation on it's best, this technique is shown for W2K/XP/2K3 only. NT4 systems doesn’t know several of the used API's, also it is possible to rewrite them. Non NT­based systems need other techniqu...
Read More >>