Questions tagged [security]

Managing the risks over information and hardware to prevent unintended or unauthorized access, change or destruction of data or disruption of service.

Filter by
Sorted by
Tagged with
0
votes
0answers
36 views

Modify a laptop AMI bios [closed]

I am not a reverser or a programmer, but I suspect to have a bios rootkit on my ASUS laptop. I want to reflash it with the original firmware from ASUS' site. The currently installed version is the ...
0
votes
1answer
111 views

Why address 7FFE0308 always gets compared in 64bit applications before making a syscall in Ntdll?

So there was a question asked before about this : What are the difference syscall and int 0x2E instructions? and it has two answer, one says that is just a way to check if we are in a 32 bit or 64 ...
2
votes
1answer
77 views

__security_cookie for function pointers in Windows 10

I'm curious about this __security_cookie that I keep seeing all over the msvcp140.dll from my Windows 10 x64 (insider build.) Here's an example: Note that the address for indirect function call (or ...
1
vote
1answer
58 views

IDA debugging a packed / encrypted library - retaining breakpoints / subroutine names set in debug segments

I am debugging a library that is heavily packed / encrypted. Here is a flowchart of the operation of this library and where I am at in my reverse engineering: Assume it is not possible to modify ...
1
vote
3answers
3k views

How to obfuscate x86 assembly code?

For my project, I am performing a kind of checksum operation on a portion of code to protect it and therefore do not want its template to be easily visible and therefore need obfuscation. I have ...
1
vote
0answers
78 views

Sniffing TCP packets using Wireshark

I am trying to reverse engineer a decoder. The decoder contains a web server that makes sending/receiving information through the Internet possible. To do so I need to sniff the packets that the ...
1
vote
1answer
454 views

Detecting cracked Themida packed malware

I'm working in a large SOC and my manager has tasked me with finding some way to provide coverage for Themida packed malware samples. As alluring as it is to suggest just blacklisting all Themida ...
0
votes
1answer
115 views

How would I go about finding the 'flag' in this QR image(Capture the Flag)? [closed]

How do I find the flag in this QR image? After scanning the QR image, I obtain the following text which may be of help: N2QzNjYyMzQ2NDMzMzMzMzM3MzAzNDM0NjEzMzMyNjEzNjM2Mzk2NTY2MzQ2NDMwMzgzODMyMzQz ...
13
votes
3answers
8k views

Are hardware dongles able to protect your software?

Various software companies distribute their software with hardware security, usually a dongle which must be mounted in order for the software to operate. I don't have experience with them, but I ...
1
vote
0answers
247 views

Has anyone reversed Wyze cameras? [closed]

Has anyone looked at the hardware to see what processor they're using or disassembled the firmware? Wyze claims to have opensourced their firmware but their github repository seems to be mostly ...
1
vote
0answers
41 views

Legal Reverse Engineering for Security Review in US for Korean Provided Module

My company has received a command-line stand-alone (ELF) executable from a Korean company that provides a service for validating Korean users. It took them a few tries to get us a version that runs on ...
5
votes
1answer
1k views

Turning Technologies RF receiver

At my university we're required to purchase these RF clickers with an lcd screen so professors who choose to take attendance can do so in an automated fashion, and occasionally administer simple ...
10
votes
1answer
8k views

Get code from protected PIC

I have a PIC18F4550 from an old device and I need to see the code. I tried reading it using my ICD3 programmer, but the chip seems to have its code protected. How can I get the code anyway?
9
votes
2answers
2k views

What causes the need for NOP sleds?

So when taking a simple scenario and exploiting a stack buffer overflow in which I can execute code on the stack, my payload simply is: NOP Sled -> Shellcode -> Padding -> New RET Address (...
1
vote
1answer
177 views

DLink LIF firmware: Error reading block 1191378964 from file. (Success)

I'm trying to look inside some D-link modem firmware using a LIF image. I get: v@debian:~/lifutils# src/progs/lifstat /home/v/Downloads/DSL-25 Volume : �SI Tracks: 0 Surfaces: 0 Blocks per Track: 0. ...
0
votes
1answer
348 views

How to find vulnerabilities in stripped binaries?

Do you just use tools like strace and a debugger to disassemble and find syscalls and then read the disassembly to find say for example a buffer overflow? Is that all you can do? I mean after all you ...
2
votes
1answer
175 views

LastPass Android javascript behaviour

A few weeks ago I made a proof-of-concept app demonstrating how LastPass' method of filling out creds in Chrome was insecure. For those interested the source is at https://github.com/activems/...
2
votes
8answers
2k views

Is MD5 hashing of files a valid method of creating an anti-virus program?

Is it a good way to create Virus signature in MD5 or it is better in SHA1 or SHA256 and why it is?
1
vote
0answers
532 views

SysTracer by SysReveal.com clean?

SysTracer from SysReveal.com (not from www.blueproject.ro) seems to be a very nice tool for live monitoring your system and check what executable files do at your system. I saw some videos on YouTube ...
1
vote
3answers
146 views

Taking up reverse engineering as a research topic, need advice [closed]

I'm currently a computer sciences undergrad who'd like to do some basic research work in reverse engineering as my premier project (for completion of my bachelor's degree). So far, I've studied ...
1
vote
0answers
43 views

How to store a string securely inside your app? [duplicate]

Let's say you have an Android or iOS app, how can you store a web API key (a string) in your app securely, making it impossible or harder to reverse engineer. Some solutions I have thought about : ...
0
votes
1answer
54 views

Is the security of this .net application flawed? [closed]

Ok, I know that every obfuscated .Net application can be reverse engineered. And I know that it is better if I go the open source way if possible. But unfortunately I cannot because there is no ...
2
votes
1answer
571 views

Why does an exe's import Table have two refrences to kernel32.dll (or any other dll)?

According to what I know, Import Descriptor table is made of an array of _IMAGE_IMPORT_DESCRIPTOR structures. There is one _IMAGE_IMPORT_DESCRIPTOR for every dll that is imported. I have an exe which ...
4
votes
0answers
157 views

differences in ASLR on Linux and Windows [closed]

Reflecting on some RE I've done recently I'm curious about how differently ASLR works across Windows and Linux :- Is it enough to compile shared libraries on Linux with the fPIC flag so that they can ...
9
votes
3answers
2k views

How to reverse engineer an ATM?

This question is using ATMs as an example, but it could apply to any number of 'secure' devices such as poker machines, E-voting machines, payphones etc. Given that ATMs are relatively hardened (in ...
14
votes
7answers
10k views

How to see what data is being transmitted when an application calls home?

Always wondered how it would be possible to see what data is being transmitted back and forth with an application that calls home. Let's say we emulate the server via host file redirect. Would it be ...
62
votes
4answers
4k views

How can I analyze a potentially harmful binary safely?

I've recently managed to isolate and archive a few files that managed to wreak havoc on one of my client's systems. So I was wondering what software and techniques make the best sandbox for isolating ...