corpus.blog
56,966 blogs · [ { "id": "01a087aa-2fdd-703d-8611-c5d618324ee4", "title": "C++ Unwind Exception Metadata: A Hidden Reverse Engineering Bonanza", "url": "https://www.msreverseengineering.com/blog/2024/8/20/c-unwind-metadata-1", "published_at": "2024-08-22T18:52:42+00:00" }, { "id": "01a087aa-2fdd-703d-8611-c5d618f2aeb0", "title": "An Exhaustively Analyzed IDB for ComLook", "url": "https://www.msreverseengineering.com/blog/2022/1/25/an-exhaustively-analyzed-idb-for-comlook", "published_at": "2022-01-25T20:37:53+00:00" }, { "id": "01a087aa-2fdd-703d-8611-c5d61959b221", "title": "Automation in Reverse Engineering C++ STL/Template Code", "url": "https://www.msreverseengineering.com/blog/2021/9/21/automation-in-reverse-engineering-c-template-code", "published_at": "2021-09-21T19:57:00+00:00" }, { "id": "01a087aa-2fdd-703d-8611-c5d61a071eca", "title": "Hex-Rays, GetProcAddress, and Malware Analysis", "url": "https://www.msreverseengineering.com/blog/2021/6/1/hex-rays-getprocaddress-and-malware-analysis", "published_at": "2021-06-02T00:10:45+00:00" }, { "id": "01a087aa-2fdd-703d-8611-c5d61a34046e", "title": "What is a while(2) loop in Hex-Rays?", "url": "https://www.msreverseengineering.com/blog/2021/3/3/what-is-a-while2-loop-in-hex-rays", "published_at": "2021-03-03T23:59:27+00:00" }, { "id": "01a087aa-2fdd-703d-8611-c5d61b07b6a5", "title": "An Exhaustively-Analyzed IDB for FlawedGrace", "url": "https://www.msreverseengineering.com/blog/2021/3/2/an-exhaustively-analyzed-idb-for-flawedgrace", "published_at": "2021-03-02T19:47:11+00:00" }, { "id": "01a087aa-2fdd-703d-8611-c5d61be61bf0", "title": "An Exhaustively-Analyzed IDB for ComRAT v4", "url": "https://www.msreverseengineering.com/blog/2020/8/31/an-exhaustively-analyzed-idb-for-comrat-v4", "published_at": "2020-09-01T16:45:00+00:00" }, { "id": "01a087aa-2fdd-703d-8611-c5d61c6b9094", "title": "A Compiler Optimization involving Speculative Execution of Function Pointers", "url": "https://www.msreverseengineering.com/blog/2020/5/7/a-compiler-optimization-involving-speculative-execution-of-function-pointers", "published_at": "2020-05-08T01:22:33+00:00" }, { "id": "01a087aa-2fdd-703d-8611-c5d61cc87fa3", "title": "Automation Techniques in C++ Reverse Engineering", "url": "https://www.msreverseengineering.com/blog/2019/8/5/automation-techniques-in-c-reverse-engineering", "published_at": "2019-08-06T01:24:33+00:00" }, { "id": "01a087aa-2fdd-703d-8611-c5d61d1371e7", "title": "An Abstract Interpretation-Based Deobfuscation Plugin for Ghidra", "url": "https://www.msreverseengineering.com/blog/2019/4/17/an-abstract-interpretation-based-deobfuscation-plugin-for-ghidra", "published_at": "2019-04-18T02:10:27+00:00" }, { "id": "01a087aa-2fdd-703d-8611-c5d61dcdd07f", "title": "Removing an Annoying Compiler Optimization with a Hex-Rays Microcode Plugin", "url": "https://www.msreverseengineering.com/blog/2019/1/22/removing-an-annoying-compiler-optimization-with-a-hex-rays-microcode-plugin", "published_at": "2019-01-22T22:39:50+00:00" }, { "id": "01a087aa-2fdd-703d-8611-c5d61eacf965", "title": "A Quick Solution to an Ugly Reverse Engineering Problem", "url": "https://www.msreverseengineering.com/blog/2019/1/14/a-quick-solution-to-an-ugly-reverse-engineering-problem", "published_at": "2019-01-14T21:05:09+00:00" }, { "id": "01a087aa-2fdd-703d-8611-c5d61ef4bcfc", "title": "Hex-Rays CTREE API Scripting: Automated Contextual Function Renaming", "url": "https://www.msreverseengineering.com/blog/2018/10/9/hex-rays-ctree-api-scripting-automated-contextual-function-renaming", "published_at": "2018-10-10T03:19:28+00:00" }, { "id": "01a087aa-2fdd-703d-8611-c5d61fef4752", "title": "Hex-Rays Microcode API vs. Obfuscating Compiler", "url": "https://www.msreverseengineering.com/blog/2018/9/19/hex-rays-microcode-api-vs-obfuscating-compiler", "published_at": "2018-09-19T10:28:44+00:00" }, { "id": "01a087aa-2fdd-703d-8611-c5d620a83f01", "title": "Weekend Project: A Custom IDA Loader Module for the Hidden Bee Malware Family", "url": "https://www.msreverseengineering.com/blog/2018/9/2/weekend-project-a-custom-ida-loader-module-for-the-hidden-bee-malware-family", "published_at": "2018-09-02T23:20:19+00:00" }, { "id": "01a087aa-2fdd-703d-8611-c5d6211ec98b", "title": "The Atredis BlackHat 2018 CTF Challenge", "url": "https://www.msreverseengineering.com/blog/2018/7/24/the-atredis-blackhat-2018-ctf-challenge", "published_at": "2018-07-24T21:27:39+00:00" }, { "id": "01a087aa-2fdd-703d-8611-c5d621884863", "title": "Concrete and Abstract Interpretation, Explained through Chess", "url": "https://www.msreverseengineering.com/blog/2018/2/26/concrete-and-abstract-interpretation-explained-through-chess", "published_at": "2018-02-27T06:00:59+00:00" }, { "id": "01a087aa-2fdd-703d-8611-c5d62274ec4c", "title": "FinSpy VM Unpacking Tutorial Part 3: Devirtualization. Phase #4: Second Attempt at Devirtualization", "url": "https://www.msreverseengineering.com/blog/2018/2/21/devirtualizing-finspy-phase-4-second-attempt-at-devirtualization", "published_at": "2018-02-21T21:15:19+00:00" }, { "id": "01a087aa-2fdd-703d-8611-c5d622d8d497", "title": "FinSpy VM Unpacking Tutorial Part 3: Devirtualization. Phase #3: Fixing the Function-Related Issues", "url": "https://www.msreverseengineering.com/blog/2018/2/21/devirtualizing-finspy-phase-3-fixing-the-function-related-issues", "published_at": "2018-02-21T21:15:12+00:00" }, { "id": "01a087aa-2fdd-703d-8611-c5d6233d4b2c", "title": "FinSpy VM Unpacking Tutorial Part 3: Devirtualization. Phase #2: First Attempt at Devirtualization", "url": "https://www.msreverseengineering.com/blog/2018/2/21/devirtualizing-finspy-phase-2-first-attempt-at-devirtualization", "published_at": "2018-02-21T21:15:08+00:00" } ] posts Claim your blog
Back to msreverseengineering.com
Blog · corpus.blog/blogs/msreverseengineering.com/posts

msreverseengineering.com

msreverseengineering.com

2024

C++ Unwind Exception Metadata: A Hidden Reverse Engineering Bonanzaoriginal ↗
22 Aug 2024

2022

An Exhaustively Analyzed IDB for ComLookoriginal ↗
25 Jan 2022

2021

Automation in Reverse Engineering C++ STL/Template Codeoriginal ↗
21 Sept 2021
Hex-Rays, GetProcAddress, and Malware Analysisoriginal ↗
2 Jun 2021
What is a while(2) loop in Hex-Rays?original ↗
3 Mar 2021
An Exhaustively-Analyzed IDB for FlawedGraceoriginal ↗
2 Mar 2021

2020

An Exhaustively-Analyzed IDB for ComRAT v4original ↗
1 Sept 2020
A Compiler Optimization involving Speculative Execution of Function Pointersoriginal ↗
8 May 2020

2019

Automation Techniques in C++ Reverse Engineeringoriginal ↗
6 Aug 2019
An Abstract Interpretation-Based Deobfuscation Plugin for Ghidraoriginal ↗
18 Apr 2019
Removing an Annoying Compiler Optimization with a Hex-Rays Microcode Pluginoriginal ↗
22 Jan 2019
A Quick Solution to an Ugly Reverse Engineering Problemoriginal ↗
14 Jan 2019

2018

Hex-Rays CTREE API Scripting: Automated Contextual Function Renamingoriginal ↗
10 Oct 2018
Hex-Rays Microcode API vs. Obfuscating Compileroriginal ↗
19 Sept 2018
Weekend Project: A Custom IDA Loader Module for the Hidden Bee Malware Familyoriginal ↗
2 Sept 2018
The Atredis BlackHat 2018 CTF Challengeoriginal ↗
24 Jul 2018
Concrete and Abstract Interpretation, Explained through Chessoriginal ↗
27 Feb 2018
FinSpy VM Unpacking Tutorial Part 3: Devirtualization. Phase #4: Second Attempt at Devirtualizationoriginal ↗
21 Feb 2018
FinSpy VM Unpacking Tutorial Part 3: Devirtualization. Phase #3: Fixing the Function-Related Issuesoriginal ↗
21 Feb 2018
FinSpy VM Unpacking Tutorial Part 3: Devirtualization. Phase #2: First Attempt at Devirtualizationoriginal ↗
21 Feb 2018