Introduction
IDA Pro is the de
facto standard when it comes to binary reverse engineering. Besides
being a great disassembler and debugger, it is possible to extend it
and include a powerful decompiler by purchasing an additional license
fr…
A friend of mine used an app that detects suspicious cell towers and has been getting warnings today. He is worried about the possibility that someone may be specifically targeting him, which leads me to wonder how exactly these fake tower…
In our project we had to build a VPN to get through to computers residing behind NAT. I never did it before. While looking for suitable software I came across WireGuard which claimed to be very simple.
After some reading I indeed was able …
Over the last few months, FireEye has tracked an in-the-wild campaign
that leverages compromised sites to spread fake updates. In some
cases, the payload was the NetSupport Manager remote access tool
(RAT). NetSupport Manager is a commercially av…
Over the last few months, FireEye has tracked an in-the-wild campaign
that leverages compromised sites to spread fake updates. In some
cases, the payload was the NetSupport Manager remote access tool
(RAT). NetSupport Manager is a commercially av…
I use Pia, arguably one of the most popular paid VPN’s on the market today. Imagine this HYPOTHETICAL scenario.
I stay on the East coast, and i use my virtual IP location as the VPN’s Datacenter in New York.
My external virtual IP from w…
A comment on a Microsoft blog from 2005 mentions over 150 sources of entropy for the Windows CryptGenRandom function. The majority of sources come from low-level system information (precise stat counters), the process’ environment block, h…
I want to introduce pagination in one of my server endpoints.
The endpoint will have an option to include in the parameter the last index of the previous page, and if included, the “page” returned will start from the first index bigger th…
DLL planting (aka binary planting/hijacking/preloading) resurface every now and then, it is not always clear on how Microsoft will respond to the report. This blog post will try to clarify the parameters considered while triaging DLL planting issues.
I…
We are running a web application using a client’s identity federation to authenticate users. A new requirement is to use 2FA, we have decided to use an OTP algorithm using Java, similar to this one featured on GitHub.
As per the OTP algo…
