Description
For those who had all the time needed to find out how to reverse and patch packed applications – with out unpacking, then that is the course for you. This course is a follow-up from the sooner course on Reverse Engineering & Memory Hacking. It’s the sensible software of what you will have learnt within the first course. For those who assume that packing and anti-debugging is sweet sufficient to stop reverse engineering, then you might be in for a shock. On this course, I will present you learn how to check the effectiveness of a number of common packers by packing crackmes after which reversing them – with out unpacking.
Historically packed applications are unpacked earlier than debugging is carried out. It’s because a packed program’s file can’t be patched. A lot of software program safety has centered on making it troublesome to unpack applications. Nonetheless, the necessary query is: how efficient is packing, obfuscation and anti-debugging as a method to stop reversing? This course explores a number of packers to seek out the solutions.
We’ll do the evaluation utilizing a device referred to as Cheat Engine, which is a distinguished device utilized by sport hackers. This device may be used to check and analyze packed program’s processes that’s working in reminiscence. You’ll learn to carry out debugging in spite of anti-debugging being carried out. There isn’t any must unpack and dump reminiscence. As an alternative of unpacking after which patching the dumped information and fixing IAT (Import Handle Desk) tables, we’ll write scripts to hack reminiscence utilizing byte patching utilizing a complicated approach referred to as AOB (Array-Of-Bytes) Injection, by injecting code into code caves (inline reminiscence patching). On this course you’ll learn to do all of the above and extra.
On the finish of this course it is possible for you to to gauge the effectiveness of software program packers, obfuscation and anti-debugging safety and in addition to have a good suggestion of learn how to implement further countermeasures to enhance the safety of software program.
In all the sensible workout routines and walkthroughs, we’ll use Crackme’s which I have written. You’ll learn to pack them utilizing a number of common packers after which hack them utilizing Cheat Engine.
What you’ll be taught
-
The right way to set {hardware} breakpoints and debug packed applications in spite of anti-debugging safety
-
Doing Break and Hint to determine Algorithms for reversing
-
Figuring out addresses to do reminiscence patching
-
Writing customized trainers (loaders) utilizing Cheat Engine to hack and patch reminiscence
-
Modify program habits
-
Course of Patching applications
-
Creating Lua Scripts for course of patching
-
Take a look at the effectiveness of Anti-Debugging know-how
-
Packing crackmes utilizing common packers
-
Hack the packed crackmes and patch their reminiscence throughout runtime
Stipulations:
-
Earlier than taking this course, it’s best to ideally be already conversant in learn how to use x64dbg and Cheat Engine
-
Home windows PC
-
Some data of Meeting could be helpful however not obligatory
So, go forward and enroll now and I’ll see you inside!
If the coupon just isn’t opening, disable Adblock, or strive one other browser.