Breaking the world, one application at a time
I'm sorry. My hoster suddenly required me to migrate to a newer version of PHP. That severely broke my WordPress setup, including the old theme and syntax highlighting, and download buttons. I'm working hard to get it all working again.
Looks like I've resolved most of the issues. Have a great stay!
Enigma Virtual Box authors made some changes in version 10.70 and broke my unpacker again. 🙁 To be able to support more and more versions, my unpacker requires some serious redesign.
That will take some thinking time and energy but I'll eventually get around to it.
In the meantime, here's a quick fix:
To start new year on a positive note, here's a new version of my Enigma Virtual Box unpacker.
Big thank you goes to everyone who reported issues with my tools. I really appreciate it!
Have a great year!
It's taken over a year but the medal for 2022 contest is finally in my hands. 🙂
This time organizers had to deal with some manufacturing issues (which took them a full year to resolve), and I had to deal with overly zealous customs and taxes office. They billed me around 20 eur in taxes and surcharges for a simple trinket. Un-fucking-believable!
There are few minor fixes:
There are few minor fixes:
Ox777h's crackme was posted on Tuts4You forum in October 2022. Description said that it uses simple anti-debugging and code virtualization, so I decided to take a look.
In this post I'll describe how the protection works and steps I took to defeat it.
Read More
Few weeks ago I wrote an article about misunderstood security in Autoplay Media Studio plugins. Two days later, author of DCrypto plugin released an updated version of the plugin. And just recently, he started to sell his plugin by making some pretty bold claims:
I present to you DCrypto with an advanced encryption that allows you to obfuscate your LUA 1.5 code in 256 Bit encryption with one of the best encryptions on the market, in addition to optimizing your source code, it will be protected with super protection.
Let's see how super this protection really is! 🙂
Read More
Every once in a while I encounter a strange anti-reverse engineering protection. Protection authors are so focused on improving one specific aspect of the protection that completely overlook other, much easier ways how the system can be defeated.
Their logic is like this - someone stole my code, I better protect it. I've heard that cryptography is good, so I'll use that. Oh no, someone stole my code again! Let me add another layer of encryption over it! Few days/weeks/months later - Those bloody hackers won't stop! Let me protect my encryption code with another encryption!
Facepalm.
What the authors should do instead is stop and think. What do I want to protect? Against whom? For how long? What kind of loss is acceptable to me?
Last September Fireeye organized 8th edition of Flare-On reverse engineering challenge. And today I finally received my prize for completing all challenges. Hooray!
This year I did not make detailed writeups but I can wholeheartedly recommend writeups made by Washi - they are awesome! 🙂