|
Reverse Engineering Code with IDA Pro
If you want to master the art and science of reverse engineering code with IDA Pro for security R&D or software debugging, this is the book for you. Highly organized and sophisticated criminal entities are constantly developing more complex, obfuscated, and armored viruses, worms, Trojans, and botnets. IDA Pros interactive interface and programmable
development language provide you with complete control over code disassembly and debugging. This is the only book which focuses exclusively on the worlds most powerful and popular took for reverse engineering code.Reverse Engineer REAL Hostile Code with Dan Kaminsky - To follow along with this chapter, you must download a file called !Danger! Infected Malware! Danger!...nuff said. The companion Web site to this book offers up really evil code for you to reverse engineer and really nice code for you to automate tasks with the IDC Scripting Language. Understand the physical layout of PE and ELF files, and analyze the components that are essential to reverse engineering. Understand execution flow, trace functions, recover hard coded passwords, find vulnerable functions, backtrace execution, and craft a buffer overflow.Debug in IDA Pro, use a debugger while reverse engineering, perform heap and stack access modification, and use other debuggers. Anti-reversing, like reverse engineering or coding in assembly, is an art form. The trick of course is to try to stop the person reversing the application. Find out how! Trace execution flow from a read event, determine the structure of a protocol, determine if the protocol has any undocumented messages, and use IDA Pro to determine the functions that process a particular message. Learn the basics of IDA scripting and syntax, and write IDC scripts and plug-ins to automate even the most complex tasks.
Contents:
Chapter 1: Introduction to IDA ProChapter 2: Installing IDA Pro on Windows, OS X, and LinuxChapter 3: Learning the IDA Pro InterfaceChapter 4: Analyzing Worms, Viruses, and TrojansChapter 5: IDA Pro as a DisassemblerChapter 6: IDA Pro as a DebuggerChapter 7: Breaking Hostile Code ArmorChapter 8: Reversing Obfuscation in Hostile CodeChapter 9: Automating IDA Pro with MacrosChapter 10: Writing your Own Exploits
Brief Description:
Helps readers learn the art and science of reverse engineering code with IDA Pro for security R&D or software debugging. This book enables readers to understand the physical layout of PE and ELF files, and analyze the components that are essential to reverse engineering.
|
