воскресенье, 22 мая 2022 г.

ida pro plugin to handle loongson elf relocs

›
It seems that you can't just go ahead and implement your own proc_def_t for processor module - bcs ida pro sdk don`t include needed symb...
понедельник, 16 мая 2022 г.

ida pro plugin for unpacking lzma compressed linux kernel

›
UOS linux for mips64 contains strange linux kernel which cannot be unpacked with famous  extract-vmlinux Lets see what happens : zimage_star...
вторник, 25 января 2022 г.

plugin for Binary Ninja

›
due to the sad fact that IDA Pro moving to cloud (just think about confidentiality) I decided to look at some alternatives - Binary Ninja. F...
суббота, 4 декабря 2021 г.

overhead of eBPF JIT

›
Lets try to estimate overhead of JIT compiler I wrote simple perl script  - it just counts redundant bytes for several cases: pair mov reg,...
среда, 1 декабря 2021 г.

jitted eBPF code

›
I add yesterday disasm for jitted eBPF code. To put it mildly this code is very poor Every function has 7 bytes of nops in prolog. Comment ...
четверг, 25 ноября 2021 г.

eBPF on cgroups

›
the long story short - they are stored in array  effective and in list  progs  in cgroup -> bpf Below I will try to explain boring and d...
четверг, 11 ноября 2021 г.

slides from our talk at Black Hat EU 2021

›
link and some afterword all presented attacks caused by misuse of Windows logging mechanism for ETW-based EDRs. And I see bad sign when the ...