hypervis0r

7 ms·

31.
by hypervis0r 9y ago
Not OP, but he is right. I just walked out of work, where I had to reverse the sample. It indeed uses EternalBlue (attacks by enumerating local network IPs with Windows APIs and randomly scanning the internet). Apart from that, it overwrite
32.
by hypervis0r 9y ago
I know what DLL injection is. I was challenging the "DLL injection API" expression, because there's no such thing as an API that allows you to arbitrarily inject a DLL into a target process. Put it this way: InjectDllIntoProc
33.
by hypervis0r 9y ago
> DLL injection API DLL "injection"? What API is that?
34.
IDA series, part 2: debugging a .NET executable(qmemcpy.github.io)
7 points by hypervis0r 9y ago|0 comments
35.
IDA series, part 1: the Hex-Rays decompiler(qmemcpy.github.io)
4 points by hypervis0r 9y ago|0 comments
36.
by hypervis0r 9y ago
I installed it literally 2h ago with no problems. Set the OS to Windows Server 2003 32-bit and don't touch anything else. It installed in no time and it works perfectly. http://i.imgur.com/bBLBWY5.png I found the Windo
37.
by hypervis0r 9y ago
You might want to read this: https://blogs.msdn.microsoft.com/oldnewthing/20060130-00/?p=...
38.
Who updates SharedUserData?(qmemcpy.github.io)
2 points by hypervis0r 9y ago|0 comments
39.
by hypervis0r 9y ago
1) Drivers break because they were poorly written, not because of Microsoft. (I know it because I write drivers) 2) Windows barely ever changes. The lengths through which the MS devs go to preserve compatibility are insane. It's incomp
40.
by hypervis0r 9y ago
Profession: reverse engineer <100 employees organization Workday: - wake up (09:30) - go to work - try to do something productive, but fail miserably, because I'm still asleep - so I fall back to reading tech blog posts (oldnewthing
41.
by hypervis0r 9y ago
Which leaked (bleed) core (heart) information.