Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [security]

Managing the risks over information and hardware to prevent unintended or unauthorized access, change or destruction of data or disruption of service.

1
vote
0answers
53 views

Sniffing TCP packets using Wireshark

I am trying to reverse engineer a decoder. The decoder contains a web server that makes sending/receiving information through the Internet possible. To do so I need to sniff the packets that the ...
0
votes
1answer
115 views

Detecting cracked Themida packed malware

I'm working in a large SOC and my manager has tasked me with finding some way to provide coverage for Themida packed malware samples. As alluring as it is to suggest just blacklisting all Themida ...
0
votes
1answer
104 views

How would I go about finding the 'flag' in this QR image(Capture the Flag)? [closed]

How do I find the flag in this QR image? After scanning the QR image, I obtain the following text which may be of help: N2QzNjYyMzQ2NDMzMzMzMzM3MzAzNDM0NjEzMzMyNjEzNjM2Mzk2NTY2MzQ2NDMwMzgzODMyMzQz ...
1
vote
0answers
145 views

Has anyone reversed Wyze cameras? [closed]

Has anyone looked at the hardware to see what processor they're using or disassembled the firmware? Wyze claims to have opensourced their firmware but their github repository seems to be mostly ...
1
vote
0answers
41 views

Legal Reverse Engineering for Security Review in US for Korean Provided Module

My company has received a command-line stand-alone (ELF) executable from a Korean company that provides a service for validating Korean users. It took them a few tries to get us a version that runs on ...
8
votes
2answers
1k views

What causes the need for NOP sleds?

So when taking a simple scenario and exploiting a stack buffer overflow in which I can execute code on the stack, my payload simply is: NOP Sled -> Shellcode -> Padding -> New RET Address (...
1
vote
1answer
167 views

DLink LIF firmware: Error reading block 1191378964 from file. (Success)

I'm trying to look inside some D-link modem firmware using a LIF image. I get: v@debian:~/lifutils# src/progs/lifstat /home/v/Downloads/DSL-25 Volume : �SI Tracks: 0 Surfaces: 0 Blocks per Track: 0. ...
0
votes
1answer
311 views

How to find vulnerabilities in stripped binaries?

Do you just use tools like strace and a debugger to disassemble and find syscalls and then read the disassembly to find say for example a buffer overflow? Is that all you can do? I mean after all you ...
1
vote
1answer
3k views

How to obfuscate x86 assembly code?

For my project, I am performing a kind of checksum operation on a portion of code to protect it and therefore do not want its template to be easily visible and therefore need obfuscation. I have ...
1
vote
0answers
461 views

SysTracer by SysReveal.com clean?

SysTracer from SysReveal.com (not from www.blueproject.ro) seems to be a very nice tool for live monitoring your system and check what executable files do at your system. I saw some videos on YouTube ...
2
votes
8answers
2k views

Is MD5 hashing of files a valid method of creating an anti-virus program?

Is it a good way to create Virus signature in MD5 or it is better in SHA1 or SHA256 and why it is?
1
vote
3answers
138 views

Taking up reverse engineering as a research topic, need advice [closed]

I'm currently a computer sciences undergrad who'd like to do some basic research work in reverse engineering as my premier project (for completion of my bachelor's degree). So far, I've studied ...
1
vote
0answers
42 views

How to store a string securely inside your app? [duplicate]

Let's say you have an Android or iOS app, how can you store a web API key (a string) in your app securely, making it impossible or harder to reverse engineer. Some solutions I have thought about : ...
0
votes
1answer
54 views

Is the security of this .net application flawed? [closed]

Ok, I know that every obfuscated .Net application can be reverse engineered. And I know that it is better if I go the open source way if possible. But unfortunately I cannot because there is no ...
2
votes
1answer
524 views

Why does an exe's import Table have two refrences to kernel32.dll (or any other dll)?

According to what I know, Import Descriptor table is made of an array of _IMAGE_IMPORT_DESCRIPTOR structures. There is one _IMAGE_IMPORT_DESCRIPTOR for every dll that is imported. I have an exe which ...
2
votes
1answer
172 views

LastPass Android javascript behaviour

A few weeks ago I made a proof-of-concept app demonstrating how LastPass' method of filling out creds in Chrome was insecure. For those interested the source is at https://github.com/activems/...
5
votes
1answer
1k views

Turning Technologies RF receiver

At my university we're required to purchase these RF clickers with an lcd screen so professors who choose to take attendance can do so in an automated fashion, and occasionally administer simple ...
4
votes
0answers
155 views

differences in ASLR on Linux and Windows [closed]

Reflecting on some RE I've done recently I'm curious about how differently ASLR works across Windows and Linux :- Is it enough to compile shared libraries on Linux with the fPIC flag so that they can ...
9
votes
3answers
2k views

How to reverse engineer an ATM?

This question is using ATMs as an example, but it could apply to any number of 'secure' devices such as poker machines, E-voting machines, payphones etc. Given that ATMs are relatively hardened (in ...
14
votes
7answers
10k views

How to see what data is being transmitted when an application calls home?

Always wondered how it would be possible to see what data is being transmitted back and forth with an application that calls home. Let's say we emulate the server via host file redirect. Would it be ...
14
votes
3answers
8k views

Are hardware dongles able to protect your software?

Various software companies distribute their software with hardware security, usually a dongle which must be mounted in order for the software to operate. I don't have experience with them, but I ...
10
votes
1answer
7k views

Get code from protected PIC

I have a PIC18F4550 from an old device and I need to see the code. I tried reading it using my ICD3 programmer, but the chip seems to have its code protected. How can I get the code anyway?
62
votes
4answers
4k views

How can I analyze a potentially harmful binary safely?

I've recently managed to isolate and archive a few files that managed to wreak havoc on one of my client's systems. So I was wondering what software and techniques make the best sandbox for isolating ...