Recent Comments

I’ve been getting a lot of action in the comments section. Now as much as I know EVERYONE is reading this, I’m reasonably certain these are just spammers. If any of you readers out there are leaving comments and not seeing them, let me know!

Keep reading, I know there has to be some of you out there hah.

Posted in Uncategorized | 2 Comments

Process

I’ve been working on revising/reviewing my research and I believe I have a working model. The end goal of course is creation of a ‘program.’ To create this, one needs a vulnerability and code. The code is made up of the exploit, or shell code, and then the rest of the program. The vulnerability needs to be found using some sort of tool, such as a debugger, reverser, or source viewer.

The basic steps I came up with then are:
1.) Become familiar with tools
2.) Find vuln with tool
3.) Write shell and code
4.) Create program

A lot is involved in each step, and it is important not to get stuck in any one place for too long. You don’t need to become an expert in a tool to use it. With this I move forward!

Until then

Posted in Research - Malware | Leave a comment

Attention to Detail Harms Progress

I’ve hit a major stumbling block these past couple weeks. Reversing programs is fun in its own right, but it is very easy to lose yourself in the code: tracking down every call, every meaning, every byte. You could spend weeks on one simple program.

This has been my problem, I’ve lost myself in weeks when only days were required. Additionally I’ve exhausted my immediate supply of ‘easy’ programs with clear vulnerabilities, so I have to step up to the challenge and dive into the next tier.

At any rate my next post will be less about updating and more discussion about what I’ve done.

Until then

Posted in Research - Malware | 1 Comment

Reverse Engineering; as Difficult as it Sounds

Monday, approximately 11:10 AM I was able to reverse my first program. Granted it was a tutorial designed to introduce you to reversing so the program was simple, BUT non-the-less! I managed to follow through and complete the task! And actually had some fun doing it too =)

I was having a difficult time with my research last week. I couldn’t make progress on reversing anything, didn’t really understand HOW to reverse, and started having doubts about learning to reverse period. A friend of mine and I were discussing this, and eventually I was lead to the tutorial. I also received a book going over some of the features of the reversing program I’m using; IDAPro.

Enough of an update for today, have to get back to the grindstone!

Until then!

Posted in Research - Malware | Leave a comment

Hello world!

This is my first new post on my new hosting site; finally off of GoDaddy hosting and loving it! I have lots of things in mind for my site, but my time is very limited this semester so we’ll see what I can do.

Until then!

Posted in General | Leave a comment

Woes of Transition

I recently changed my hosting from GoDaddy to MediaTemple. The process was by no means easy; many times changing a setting and waiting days for it to take affect. But in the end MediaTemple is much more user friendly and useable compared to GoDaddy, which is one reason why I moved here.

At the same time I was switching hosting sites, I was switching laptops. I was using a school assigned PC over the summer to do all my work, both personal and school related. When school started this fall I was given the chance to use a MacBook pro, which I gladly accepted. Trying out something new is always fun right? Well almost always, there was one thing I forgot to do when switching from my PC to my Mac: move my website’s back up.

I didn’t have much on my site, but it was MY content that I wanted to keep, and now it’s gone. But its not all bad, I get to start fresh with a new hosting site, new laptop, and new website. Almost poetic. So with that I begin my new adventure filled with school, me, and all other sorts of things.

Until then!

Posted in General | Leave a comment