nvzavi

A work in progress..... "File Signature Resolver" - My attempt at an application / tool to detect a file's type, fix headers, patch and carve bytes as well as generate hashes. github.com/nvzavi/fsr

Little youtube video that explains 32 bit stacks youtu.be/q49MQ6UgsHs #32bitstack #reverseengineering #ghidra #assemblycode #stack

My attempt at a small malicious javascript analysis tool (beta). Intention is to enable a quicker understanding of the JavaScript capabilities and true intentions. nvzavi.wordpress.com #reverseengineering #javascriptanalysis #maliciousjavascript

@dwmetz I really enjoyed this course as well. Side note: I think that there is a new SANS FOR710 Reverse Engineering Malware: Advanced Code Analysis coming soon as well...not sure...but super excited

My attempt at drawing a diagram that highlights how parameters and local variables are referenced on the stack. Done to aid in understanding how variables are referenced in general and in ghidra when reverse engineering #ghidra #stack #reverseengineering

RE tip of the day: Apart from the BeingDebugged flag, the NtGlobalFlag field of the PEB structure can tell malware that it is being debugged (bits 0x10, 0x20 and 0x40). Its offset is 0x68 on 32-bit systems and 0xBC on 64-bit. #infosec #cybersecurity #malware #reverseengineering

I updated the #Malware Analysis Fundamentals - Files & Tools slides winitor.com/pdf/Malware-An…

@cyb3rops Brilliant stuff

Hahaha 😄 ... who made this?

Analyzing Malicious Documents Cheat Sheet has been updated to include new tools and techniques: zeltser.com/analyzing-mali…

The slides and video for my presentation on malicious Excel 4 macros are now available. You just need a free SANS account to watch. sans.org/webcasts/tech-…