Comments on: Introduction to Reverse Engineering

By: bow.sineath

bow.sineath — Mon, 30 Jun 2008 02:29:59 +0000

I wanted to let those of you that requested the slides know that I posted them, along with the sources to two of the binaries we looked at. The links are on my blog.

I welcome any questions or comments

By: s7726

s7726 — Sat, 21 Jun 2008 20:22:25 +0000

I am on the west coast, this looks awesome and I would like to second the vidcast idea

By: bow.sineath

bow.sineath — Fri, 20 Jun 2008 22:27:01 +0000

@maco:

Unfortunately, I don’t think there is anything I can really recommend. For the first part of the class, we’ll be using some code that I wrote for examples and you could compile that under gcc and disassemble it in GDB or using objdump, but there will be significant differences in what you see GCC producing and Visual C++ (although the concepts will be the same). I should have clarified in the abstract that the majority of what we’ll be looking at (if not all of it) will be Win32 binaries, but for the most part, you could probably follow along.

You could also try running IDA Pro under wine, I remember having some success with that previously, that way you could disassemble the Win32 binaries we’ll be looking at.

We probably won’t be using the hex editor that much to be honest, I just recommend 010 editor because it makes looking at binary file formats easier using the templates.

By: maco

maco — Fri, 20 Jun 2008 19:49:05 +0000

Any suggestions for a disassembler for those of us that don’t have access to mainstream OSes (ie the Linux geeks)? Vi can do hex-editing just fine, from what I recall, so that’s the one thing I’m worried about.

By: Tom

Tom — Fri, 20 Jun 2008 19:10:32 +0000

Unfortunately I’ll be out of town on the 28th. Any chance of having this recorded as a podcast/video/screencast? I could probably help provide equipment toward that end if necessary.