Subscribe:
RSS feed
Nerdy things…
Browsing All Posts filed under »tools«
A Lackluster ‘Hack Cluster’: ARM Exploitation Lab Preview
As we have announced in other blogposts we’ve been researching mobile platforms quite a bit (specifically those that use the ARM microprocessor). We compiled all of our notes on ARM reverse engineering and ARM exploitation and built a course called “Practical ARM Exploitation” that we will be publicly debuting this coming week at CanSecWest. The […]
Hardware Hacking for Software People
For most of my career as a software developer/security researcher I’ve romanticized ‘hardware hacking’. In my late teens and early twenties as I was learning about software development and software security I would occasionally buy Nuts and Volts from Microcenter and read Karl Lunt‘s Amateur Robotics column. Having devoured William Gibson‘s oeuvre in my late […]
SMT Solvers Summerschool at MIT
Earlier this summer Beans attended the weeklong SMT Solver Summer school held at MIT campus in Boston, Mass. Over the last few years having seen some of the presentations by Pablo Sole on DEPLIB, blogposts by Sean Heelan, and having messed around a little bit with the REIL in BinNavi we were really curious to get a […]
Greyhat Ruby (Source Boston)
In 2011, I (Stephen A. Ridley) don’t plan on attending too many conferences that require far away travel for many reasons. 1) My work isn’t as interesting anymore ;-( and 2) I can’t travel as easily with Sammiches. With Boston being in the northeast (close to us) we decided we’d try SourceBoston out for the […]
WhoHasTlb? : Extracting TypeLib data from COM Objects
So let’s say that you’re sitting down to a project (perhaps a malware analysis gig, fuzzing something, or just reversing) and you realize that most of the target is implemented in COM/ActiveX Objects. What would really help you starting off on this project is a human readable version (IDL) of the TypeLib associated with the […]
Android Scripting Layer (Encrypted SMS communication)
Recently I (Stephen A. Ridley) have been doing quite a bit more security research on embedded systems and mobile platforms like phones. This naturally means more development in these areas. A while back I ran into SL4A or Scripting Layer for Android which was (at the time) called ASE or Android Scripting Environment. (Apparently they […]
Disassembling BlackBerry apps, take 2
February 19, 2009 by slawlerguy
A couple people brought to my attention that the coddec patch, well, doesn’t work. And they were right! I just committed a new patch which should work. Also, provided here are hopefully some instructions to get this working: Download coddec.rar from wherever Extract into some directory and cd into the directory patch -p1 < coddec.patch […]
Disassembling Version 6 BlackBerry apps
January 7, 2009 by slawlerguy
Now and again I have to disassemble BlackBerry apps. BlackBerries pretty much run all Java code. You might think this would mean everything was .class files and you could jad everything, but this is not the case. Everything gets compiled to “.cod” files, a file format I have found very little information about on the […]
Javascript Malware Deobfuscation
So it turns out that there is a useful trick when working with and deobfuscating quasi-encrypted and obfuscated Javascript (like that seen in malware). The other Stephen observed that the function “COlescript::Compile()” in JSCRIPT.DLL is basically the place in the javascript interpreter that equates to an eval(). If you break here at runtime (like so) […]
March 1, 2012 by s7ephen
1