Reversing (en)
Automating Binary Analysis and Manipulation with the Binary Ninja Python API
Automating binary analysis and manipulation with the Binary Ninja Python API.
ReadSelf-Restoring Binary Deobfuscation with Unicorn and Capstone
Self-Restoring Binary Deobfuscation with Unicorn and Capstone
ReadCreate a DLL File on Windows and Try Loading It into a Process in Various Ways
I created a DLL file on Windows and tried loading it into a process in various ways.
ReadTips for Customizing Ghidra UI Themes
Here are some tips for customizing Ghidra UI themes, including how to change fonts and colors.
ReadUse a PowerShell Script to Configure Windows Full Memory Dumps and Keyboard Crashes
I created a PowerShell script to automate the configuration for collecting full dumps on Windows and for configuring keyboard crashes.
ReadWe Don't Know angr Yet (Z3py Notes Being Added)
I had been using angr with template scripts without much thought.
ReadSolving a CTF Challenge with Your First Ghidra Script
Using your first Ghidra Script to solve a CTF challenge
ReadNotes on Useful GFlags Settings for Troubleshooting Windows Environments
This article summarizes useful GFlags settings to remember when troubleshooting Windows. It covers settings such as debugger flags and Silent Process Exit that can help when investigating issues on Windows.
ReadEnumerating Process Information in the System with Win32 API
I tried enumerating process information in the system using Win32 API.
ReadNotes on Reading Windows Process Information with WinDbg
Notes on reading Windows process information with WinDbg. This article covers topics such as the EPROCESS structure and process manipulation using WinAPI, with more content planned for the future.
ReadCheat Sheet for Dump Analysis and Live Debugging with WinDbg
A cheat sheet summarizing the WinDbg commands I often use personally. I plan to add more content in the future.
Read