Tubidy
    Tracing executables with a Pin Tool (tiny_tracer)

    Tracing executables with a Pin Tool (tiny_tracer)

    11:53 |
    Download MP3

    Related Videos

    PE-sieve/HollowsHunter with custom signatures (SigFinder) 13:24

    PE-sieve/HollowsHunter with custom signatures (SigFinder)

    Unpacking YoungLotus malware 6:52

    Unpacking YoungLotus malware

    Experiment: ProcessExplorer vs my "lil_calc" 1:06

    Experiment: ProcessExplorer vs my "lil_calc"

    DEMO: Unpackig process hollowing with PE-sieve 1:40

    DEMO: Unpackig process hollowing with PE-sieve

    Installing TinyTracer on Windows 10 12:44

    Installing TinyTracer on Windows 10

    Unpacking a MalPack with multiple payloads - part 1 22:40

    Unpacking a MalPack with multiple payloads - part 1

    Using IAT_Patcher in malware analysis 5:09

    Using IAT_Patcher in malware analysis

    My experiments with ProcessDoppelganging - running a PE from any file 1:27

    My experiments with ProcessDoppelganging - running a PE from any file

    AntiPetya Ultimate - LiveCD 0:31

    AntiPetya Ultimate - LiveCD

    [DEMO] HollowsHunter detects impersonated processes 2:17

    [DEMO] HollowsHunter detects impersonated processes

    IFL - Interactive Functions List - a plugin for IDA Pro 1:10

    IFL - Interactive Functions List - a plugin for IDA Pro

    hook finder vs Process Doppelganging 1:06

    hook finder vs Process Doppelganging

    Unpacking ISFB (including the custom 'PX' format) 24:16

    Unpacking ISFB (including the custom 'PX' format)

    My experiments with enSilo's Process Doppelganging 1:45

    My experiments with enSilo's Process Doppelganging

    Using the obtained key 0:45

    Using the obtained key

    PE-sieve demos (for Pentester Academy ToolBox) 28:50

    PE-sieve demos (for Pentester Academy ToolBox)

    DEMO: Retrieving function names by checksums using libPeConv + code of the original malware 1:23

    DEMO: Retrieving function names by checksums using libPeConv + code of the original malware

    ParamKit library 9:47

    ParamKit library

    PE-sieve release notes: process reflections 7:34

    PE-sieve release notes: process reflections

    How Kronos malware is paired with a browser 9:57

    How Kronos malware is paired with a browser