Search for a command to run...
Introduction In this article, I will discuss the details of the Driver Signature Enforcement Policy and Event Tracing for Windows mechanisms, which play an important role on the Windows side for malware. Below, I have touched upon what DSE and ETW ar...
This is a post of mine from an old blog (vx.zone). It has been revised again just for 0xReverse. Introduction In this blog post, we have a packed PE file. We will analyze it and unpack it with Qiling Framework. Once you understand how encryption work...
This is a post of mine from an old blog (vx.zone). It has been revised again just for 0xReverse. Introduction In this blog post, I’ll explain how to trace and manipulate a program with DynamoRIO. I’ll use a simple program to explain the concepts (Sou...
Introduction In this article, we will analyze the zero-click windows TCP/IP RCE (CVE-2024-38063) vulnerability published by Microsoft on August 13, 2024. This vulnerability is caused by unsafe calculations when setting the allocation and data copying...
Bu yazının Türkçe versiyonu özel olarak TTMO için Türkiye'deki tersine mühendislik topluluğuna hazırlandı. Introduction Özellikle zararlı yazılım geliştiricileri ile kaynak kodunu korumak isteyen kullanıcılar tarafından sıklıkla tercih edilen binary-...
Introduction Binary-to-binary (bin2bin) obfuscators, which are frequently preferred by both malware developers and users seeking to protect their source code, are making the work of malware analysts and reverse engineering experts increasingly diffic...
