Collaborate Disseminate
The Reverse Engineering webinar audience having been so active not only were we unable to address all the incoming questions online, we didn’t even manage to pack the rest of them in one blogpost. So here comes the second part of the webinar follow-up. Continue reading Targeted Malware Reverse Engineering Workshop follow-up. Part 2
I’ve received emails recently, where the sender is an address to their personal website.
From: name.net
Instead of a normal email such as mine, which is always in the form:
From: name@mail.com
I would like to learn how this is achieved… Continue reading Using a site as email address [closed]
An application I admin (but did not develop or implement) claims to be storing passwords in a database using “reversible encryption.”
I have access to the database table, and was able to work out that they’re really only obfuscated, and ca… Continue reading Passwords stored as obfuscated text, not encrypted
Suppose you are going to mass manufacture custom circuit boards and would like the manufacturer to upload the device firmware onto these boards before shipping them out. What are some security systems/methodologies/features you would put i… Continue reading How to Prevent Copying of Device Source Code in Manufacturing
Can indistinguishability obfuscation (iO) be leveraged upon to deter/stop data exfiltration like what we seen in Solarwinds and Hafnium attacks?
I found an obfuscated PHP-script in a log directory on a shared hosting, which had been given chmod 0777 by mistake.
The script in it’s original form looks like this:
$zowyb = ‘i#7uH0_ls5y4m*bcrovaptf-8d1x69\’3egkn’;
$hifcq = array();
$hif… Continue reading What does this obfuscated PHP script do? [duplicate]
I have a meterpreter custom loader i made in c and i want a program to obfuscate it so it is hidden from antivirus. I wanna make it undetectable.
Pls post the software download link so i can find it. Post one that no conntains virus pls
Sr… Continue reading I Have a Custom C Meterpreter Loader And i wanna obfuscate it to hid it from antivirus [closed]
A Magento website owner was concerned about malware and reached out to our team for assistance. Upon investigation, we found the website contained a PHP injection in one of the Magento files: ./app/code/core/Mage/Payment/Model/Method/Cc.php
…
if ($_… Continue reading Magento PHP Injection Loads JavaScript Skimmer
The game uses Unity3D engine, perhaps with a custom render pipeline. Reports have been made, it is not possible to disassemble it. How did they achieve that?
I’m developing application with react and all the main logic is on the client side. I want to force users to use the application only if they paid for the app subscription.
Are there any methods to prevent(or harden the ability to remove c… Continue reading Securing client side code of react application [duplicate]