Shell-storm.org Website Review

mostly focused on both static and dynamic program an*lysis. I also enjoy doing things in various fields like: OSdev, reverse engineering, bugs exploitation and others low-level stuffs. You will find the results of my different researches on this blog. last decade in order to protect legit software against reverse engineering or tampering. Virtualization is considered as one of the very best defenses against such attacks. We present a generic approach based on symbolic path exploration, taint and recompilation allowing to recover, from a virtualized code, a devirtualized code semantically identical to the original one and close in size. We define criteria and metrics to evaluate the relevance of the deobfuscated results in terms of correctness and precision. Finally we propose an open-source and which recompiles a new version of the binary without such protections. This automated approach relies on a symbolic execution to the Triton framework to expose its components and to explain how they work together. Then, the second part will include demonstrations on how it's possible to reverse virtual machine based protections using taint an*lysis, symbolic execution, SMT simplifications and code. We will first introduce some basic obfuscation techniques and then expose how it's possible to break some stuffs (using our open-source DBA framework - Triton) like detect opaque predicates, reconstruct CFG, find the original algorithm, isolate sensible data intellectual property. There exist different kinds of obfucation but roughly, it transforms a binary structure into another binary structure by preserving the same semantic. The aim of obfuscation is to ensure that the original information is drown in useless information that will make reverse engineering harder. In this article we will show how we can an*lyse an ofbuscated program and break some engine, a dynamic symbolic execution engine, a snapshot engine, translation of x64 instruction to SMT2, a Z3 interface to solve