Reverse Engineering
@reverseengineeringx
4.84K subscribers
106 photos
1 video
18 files
458 links
Everything is open-source.

The official community group: @reverseengineeringz
Download Telegram
About
Blog
Apps
Platform
Join
Reverse Engineering
4.84K subscribers
Reverse Engineering
https://github.com/fdiskyou/injectAllTheThings

https://securityxploded.com/remotedll.php
881 views
Reverse Engineering
https://www.fortinet.com/blog/threat-research.html
819 views
Reverse Engineering
https://stackoverflow.com/questions/3404372/stdcall-and-cdecl
Stack Overflow
stdcall and cdecl
There are (among others) two types of calling conventions - stdcall and cdecl. I have few questions on them:
When a cdecl function is called, how does a caller
know if it should free up the stack ?...
803 views
Reverse Engineering
https://cysinfo.com/category/articles/
Cysinfo
Articles Archives - Cysinfo
Write ups from our Team Members
803 views
Reverse Engineering
https://www.fireeye.com/content/dam/fireeye-www/services/pdfs/mandiant-apt1-report.pdf
800 views
Reverse Engineering
https://www.trendmicro.it/media/wp/the-heartbeat-apt-campaign-whitepaper-en.pdf
Trend Micro
Numero uno per Cloud Security ed Endpoint Cybersecurity | Trend Micro
Trend Micro è leader mondiale di soluzioni enterprise di sicurezza in cloud, XDR e piattaforme di cybersecurity per aziende, datacenter, ambienti cloud, reti ed endpoint.
844 views
Reverse Engineering
https://www.symantec.com/content/dam/symantec/docs/security-center/white-papers/increased-use-of-powershell-in-attacks-16-en.pdf
886 views
Reverse Engineering
https://medium.com/tenable-techblog/comodo-from-sandbox-to-system-cve-2019-3969-b6a34cc85e67
Medium
COModo: From Sandbox to SYSTEM (CVE-2019–3969)
Antivirus (AV) is a great target for vulnerability hunting: Large attack surface, complex parsing, and various components executing with…
825 views
Reverse Engineering
https://www.fireeye.com/blog/threat-research/2012/08/hikit-rootkit-advanced-persistent-attack-techniques-part-1.html

https://www.fireeye.com/blog/threat-research/2012/08/hikit-rootkit-advanced-persistent-attack-techniques-part-2.html
816 views
Reverse Engineering
https://unit42.paloaltonetworks.com/t9000-advanced-modular-backdoor-uses-complex-anti-analysis-techniques/
Unit 42
T9000: Advanced Modular Backdoor Uses Complex Anti-Analysis Techniques
Unit 42 found a backdoor, T9000, that allows the attacker to capture encrypted data, take screenshots of specific applications, and target Skype users.
832 views
Reverse Engineering
https://www.welivesecurity.com/wp-content/uploads/2016/05/Operation-Groundbait.pdf
788 views
Reverse Engineering
https://docs.microsoft.com/en-us/windows/win32/com/the-component-object-model
Docs
The Component Object Model - Win32 apps
790 views
Reverse Engineering
https://docs.microsoft.com/en-us/windows/win32/dlls/dynamic-link-library-search-order
Docs
Dynamic-link library search order - Win32 apps
You can control the specific location from which any given DLL is loaded by specifying a full path. If you don't use that method, then the system searches for the DLL at load time as described in this topic.
796 views
Reverse Engineering
https://docs.microsoft.com/en-us/windows/win32/cimwin32prov/win32-service
Docs
Win32_Service class - Win32 apps
Represents a service on a computer system running Windows.
816 views
Reverse Engineering
https://cysinfo.com/blackout-memory-analysis-of-blackenergy-big-dropper/
Cysinfo
Blackout - Memory Analysis of BlackEnergy Big dropper - Cysinfo
In late December a cyber attack caused power outage for few hours in the Ivano-Frankivsk region in Ukraine as mentioned here. Threat researchers from ESET linked this attack to a malware called “BlackEnergy” which attacked electricity distribution companies…
834 views
Reverse Engineering
http://www.alex-ionescu.com/
826 views
Reverse Engineering
https://github.com/stephenfewer/ReflectiveDLLInjection
GitHub
GitHub - stephenfewer/ReflectiveDLLInjection: Reflective DLL injection is a library injection technique in which the concept of…
Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process. - stephenfe...
849 views
Reverse Engineering
http://aluigi.altervista.org/mytoolz.htm
aluigi.altervista.org
Luigi Auriemma
866 views
Reverse Engineering
Security is notoriously disunited. Every year multiple tools and projects are released and never maintained. TitanMist is its inverse opposite. Built on top of TitanEngine, it provides automation and manages all known and good PEID signatures, unpacking scripts and other tools in one unified tool.

https://www.reversinglabs.com/open-source/titanmist
913 views
Reverse Engineering
https://cysinfo.com/detecting-deceptive-hollowing-techniques/
Cysinfo
Detecting Deceptive Process Hollowing Techniques Using HollowFind Volatility Plugin
In this blog post we will look at different types of process hollowing techniques used in the wild to bypass, confuse, deflect and divert the forensic analysis. I also present a Volatility plugin hollowfind to detect these different types of process hollowing.…
981 views