Skip to main content
got trolled too much this week's user avatar
got trolled too much this week's user avatar
got trolled too much this week's user avatar
got trolled too much this week
  • Member for 9 years, 11 months
  • Last seen more than a month ago
comment
Why some anti-debugging/malware does `wmiadap.exe /f /t /r`?
I suspect it's because ProcMon (rather than a typical debugger) uses a filter driver. medium.com/@demonia/… I'm not sure how effective the method is though. Remains to be tested.
revised
Static offsets Vs. Loaded Offsets
typo and windows tag
Loading…
comment
Working with strong obfuscated Java
@Vezmoq: recaf can rename classes/methods to ascii. That's usually a good first step, although sometimes doing that breaks code because some obfuscators use reflection from strings (not necessarily encrypted) and that's enough for recaf not be able to deal with the translation correctly.
revised
Java .class bytecode debugger
added 423 characters in body
Loading…
revised
Java .class bytecode debugger
added 87 characters in body
Loading…
revised
Java .class bytecode debugger
added 151 characters in body
Loading…
revised
Java .class bytecode debugger
added 105 characters in body
Loading…
answered
Loading…
comment
Help to identify intermediate language
They say the scripts run (only) on their servers. Some proprietary backend, of course. It's somewhat of a 2nd/3rd year in college project to write an interpreter for something as simple as that. Or even a compiler in a compiler class. How optimized it would be is another question. Possibly they translate to Java, LLVM or something else if they care more about performance.
comment
Java .class bytecode debugger
And Bytecode Viewer, which is still maintained, might claim it's a "Debugger", but it isn't.
comment
Java .class bytecode debugger
Most of these are far too old to be useful. The Dr. Garbage stuff doesn't work in recent Eclipses etc. JBCD is from 2003 and was probably useless even you wrote this answer, except for Java 2 or something that ancient.
awarded
awarded
answered
Loading…
comment
Removing a limit in Notepad
@oleedd: of course it doesn't. The check is there to prevent a buffer overflow.
Loading…
awarded
revised
Reverse engineering an hydrometer's Bluetooth communication
added a few more tags as most likely this doesn't involve much encryption [if any]
Loading…