Protected: FlareOn 7 – Task 9 ← Flare-On 6 (tasks 10-12)Protected: FlareOn 7 – Task 9... 2020-12-13 02:25:54 | 阅读: 197 | 收藏 | hshrzd.wordpress.com hasherezade flare programmer bookmark

Flare-On 6 (tasks 10-12) Flare-On 6Flare-On Challenge is an annual competition organized by FireEye (the FLARE team).... 2019-09-30 09:04:09 | 阅读: 143 | 收藏 | hshrzd.wordpress.com volatility imports flare d7 mugatu

Application shimming vs Import Table recovery In this post I am sharing a case that I investigated recently, during the tests of my applica... 2019-06-28 01:37:32 | 阅读: 110 | 收藏 | hshrzd.wordpress.com sieve imports imp messageboxa apphelp

PE-bear – version 0.3.9 available [UPDATE] This release introduced some stability issues, fixed in 0.3.9.5Hello! Several month... 2019-01-13 08:33:43 | 阅读: 234 | 收藏 | hshrzd.wordpress.com bear windows permalink calculated verifies

How to compile a PIN tool using Visual Studio 2017 How to compile a PIN tool using Visual Studio 2017UPDATE: the d... 2018-07-16 11:02:40 | 阅读: 102 | 收藏 | hshrzd.wordpress.com crtbegins tracer xed windows compiling

PE-bear – version 0.3.8 available PE-bear – version 0.3.8 availableIt has been a long time since... 2018-04-04 10:45:55 | 阅读: 106 | 收藏 | hshrzd.wordpress.com bear 64bit incorrect mantainance

White Rabbit crackme! White Rabbit crackme!UPDATE: We already got the three winners.... 2018-02-03 07:20:16 | 阅读: 102 | 收藏 | hshrzd.wordpress.com writeups contest rabbit reward winners

Unpacking a malware with libPeConv (Pykspa case study) In one of the recent episodes of “Open Analysis Live!” Sergei demonstrated how to statically... 2018-01-29 08:04:11 | 阅读: 104 | 收藏 | hshrzd.wordpress.com unpack blob2 blob1 ulonglong peconv

Solving a PyInstaller-compiled crackme I got this crackme from one of my readers, who asked me for the help in understanding how to... 2018-01-27 04:48:26 | 阅读: 127 | 收藏 | hshrzd.wordpress.com python pyc nigel decompiler zlib

Process Doppelgänging – a new way to impersonate a process Recently at Black Hat Europe conference, Tal Liberman and Eugene Kogan form enSilo lab presen... 2017-12-19 06:04:16 | 阅读: 129 | 收藏 | hshrzd.wordpress.com hasherezade github windows

Hook the planet! Solving FlareOn4 Challenge6 with libPeConv Recently I started making a small library for loading and manipulating PE files (libpeconv –... 2017-12-02 04:25:59 | 阅读: 118 | 收藏 | hshrzd.wordpress.com peconv libpeconv loader github flareon2017