.

[Article]-Anti-Hacker Tool Kit: Reverse Engineering Binaries

<<

don

User avatar

Administrator
Administrator

Posts: 4226

Joined: Sun Aug 28, 2005 10:47 pm

Location: Chicago

Post Mon Aug 28, 2006 5:02 pm

[Article]-Anti-Hacker Tool Kit: Reverse Engineering Binaries

As we move into more advanced ethical hacking topics, the subject always comes up of whether you have to learn programming or not. Regardless of which side of the fence you fall, this free chapter from the Anti-Hacker Tool Kit, 3rd Edition will be a great start.

Your computer seems to be running slower than normal. The router shows that your computer is transmitting data out to the Internet without you knowing it. Friends are complaining about you sending them e-mails you never composed. Determined to see if you have a Trojan running on your computer, you take a look at your process list to see if there is anything out of the ordinary. Much to your dismay, you notice a program running that you have never seen before and didn’t explicitly start. You have been backdoored by malware.

There are many questions you should be asking in these situations. What does the program do? Does it use network resources? Can outside hackers now access my computer? Am I being used as a zombie for DDoS attacks? This chapter will focus on methods and tools you can use to determine what these programs do and how they do them, without having the source code. In the past, reverse engineering was something of a black art. Typically it involved some type of decompilation using a tool such as IDA or GDB to extract the assembly out of the binary, and the best you could hope for was to have that assembly converted into a low-level C code that you could use to understand what was going on. These tools have evolved, however, and you no longer need a PhD in Computer Science to be able to reverse engineer binaries. That being said, however, a brief primer will go miles in helping you understand when to use certain tools and when to use others.


Anti-Hacker Tool Kit: Reverse Engineering Binaries

Don
CISSP, MCSE, CSTA, Security+ SME
<<

LSOChris

Post Tue Aug 29, 2006 12:08 am

Re: [Article]-Anti-Hacker Tool Kit: Reverse Engineering Binaries

you need to learn to program (even if just enough to be dangerous), you need to learn to use a debugger and disassembler (again, even if just enough to be dangerous)
<<

don

User avatar

Administrator
Administrator

Posts: 4226

Joined: Sun Aug 28, 2005 10:47 pm

Location: Chicago

Post Tue Aug 29, 2006 12:07 pm

Re: [Article]-Anti-Hacker Tool Kit: Reverse Engineering Binaries

This article has been submitted to digg.com, so let the votes fly.

One good thing, I did not submit it. Someone else did. That's a good sign for this site if others are submitting our stuff to other sites. So thanks goes to h1d30.

Don
CISSP, MCSE, CSTA, Security+ SME

Return to Book Reviews

Who is online

Users browsing this forum: No registered users and 1 guest

.
Powered by phpBB® Forum Software © phpBB Group.
Designed by ST Software