131
edits
52455645525345: Difference between revisions
m
Layout
m (Layout) |
|||
| Line 18: | Line 18: | ||
}} | }} | ||
== ReVeRsE Engineering - Welcome to the page of the reverse engineering group! == | |||
Reverse Engineering PEs is fun! It's like a puzzle and if there is an algorithm out there that can solve this puzzle, it's your brain. =) | |||
I, {{U|barbieauglend}}, would love to take a look at binaries with you and figure out together what the programs do. They are often a lot easier than you might think! | |||
If you want to participate, you will need a laptop (with charger!) with a Windows 7 guest machine. If you don't have it or have problems organizing it, please let me know before the workshop =) We can manage something! And if you have any questions, feel free to contact me under {{mailto|barbieauglend@chaosdorf.de}}. | |||
== Please read == | == Please read == | ||
Requirements: | Requirements: | ||
| Line 50: | Line 45: | ||
* Dynamic Analysis tools and techniques for RE | * Dynamic Analysis tools and techniques for RE | ||
I am going to bring some nice binaries which we can go through together. We are going to explore how static reverse engineering works and how can we use it to understand what a piece of malware does (hopefully | I am going to bring some nice binaries which we can go through together. We are going to explore how static reverse engineering works and how can we use it to understand what a piece of malware does (hopefully). | ||
== Participants (please register!) == | == Participants (please register!) == | ||
| Line 60: | Line 55: | ||
*ocyphert | *ocyphert | ||
== | == Other related things == | ||
* [https://www.garykessler.net/library/file_sigs.html File signatures] | * [https://www.garykessler.net/library/file_sigs.html File signatures] | ||
* [https://events.ccc.de/congress/2014/Fahrplan/system/attachments/2562/original/Funky_File_Formats.pdf File Formats] | * [https://events.ccc.de/congress/2014/Fahrplan/system/attachments/2562/original/Funky_File_Formats.pdf File Formats] | ||
* [http://archive.hack.lu/2015/Albertini%20-%20Trusting%20files.pdf Moaaarr File Formats] | * [http://archive.hack.lu/2015/Albertini%20-%20Trusting%20files.pdf Moaaarr File Formats] | ||
* [https://pixl.dy.fi/posts/2018-01-22-reverse-engineering-basics-with-radare-fundamentals-and-basics/ Nice good to know before starting RE!] | * [https://pixl.dy.fi/posts/2018-01-22-reverse-engineering-basics-with-radare-fundamentals-and-basics/ Nice good to know before starting RE!] | ||