Statistics

Members: 1927
News: 293
Web Links: 1
Visitors: 4053071

Who's Online

We have 4 guests online
Damn Vulnerable LinuxDamn Vulnerable Linux (DVL) is a Linux-based (modified Damn Small Linux) tool for IT-Security & IT-Anti- Security and Attack & Defense. [CLICK HERE FOR MORE INFOS! ]

Featured Conference Video

T16-Recon2006-Joe_Stewart-OllyBonE.gif OllyBone - Semi-Automatic Unpacking on IA-32. View the conference video here!
Home
Replication from data files
User Rating: / 0
PoorBest 
Written by Roy G. Biv   
Side Story
CRC and how to Reverse it

This essay consists of a CRC tutorial and a way of how to reverse it. Many Coders/Reversers don’t know exactly how CRC works and almost no one knows how to reverse it, while this knowledge could be very usefull. First the tutorial will learn you how to calculate CRC in general, you can use it as data/code protection. Second, the reverse part will learn you (mainly) how to reverse CRC-32, you can use this to break certain CRC protections in programs or over programs (like anti-virus). There seem to be utilities who can ’correct’ CRCs for you, but I doubt they also explain what they’re doing. I’d like to warn you, since there is quite some math used in this essay. This wont harm anyone, and will be well understood by the avarage Reverser or Coder. Why? Well. If you dont know why math is used in CRC, I suggest that you click that button with a X at the top-right of this screen. So I assume the reader has knowledge of binair arithmetic.

Read More >>



Executable files are, obviously, directly executable. This also means that code added to these files can be executed directly. Can the same thing be done for data files? No. That is why they are called data files. However, what can be done is to change the environment so that data files become executable files. Then code can be added to these files that can be executed directly.

 

Keywords: Virus Technology; Infected Data Files; VXMethods; Image Infection

Download: pdf Replication from data files