Reverse engineering

Kurt godel

JF-Expert Member
Jan 11, 2017
319
174
After months of months of hard work I finally did it nimeweza reverse engineer cryptolocker.It was amazing hii experience all my years of programming ila cjawahi pata hii experience ya ku reverse engineer executable Na kuielewa inavyofanya kazi.So what is reverse engineering ?

Reverse engineering is simply the act of examining through code either source or executable so as to determine its functionality.Ni kama kazi aifanyayo mtoto mdogo wakati akiwa anafungua vifaa ili aelewe jinsi vinavyofanya kazi.Requires deep knowledge ila kufanya reverse engineering ila uzuri wake ni kuwa it takes you deep into the machine.

Kwa watu ambao wanataka kuielewa vzur computer systems jaribuni reverse engineering it's worth it.It will make you a power user.
 
it does not necessary require Deep Knowledge especially executable unayo i reverse engineer kama imeandikwa kwa language ambazo zina generate intermediate language kama C# au Java.
Kwa hizo lugha mbili e.g Kwenye Java mtu kama ame distribute executable yake kama JAR haiitaji rocket science kuona source code yake same applies akiifanya JAR file kuwa .EXE kama ametumia some free stuffs au cheaper means inakua rahisi zaidi bila kusahau Android APKs kama developer hajafanya Code Obfuscation na Pro-Guard imekula kwake unai reverse kilaini.
Tukija C# na VB.NET ngoma ni ile ile hauitaji rocket science kuona source code ya developer...na hata kama ame Obfuscate source code ukiwa motivated utaisoma though with difficulties.

Kama hiyo cryptolocker imeandikwa kwa C/C++(which is the most obvious case) hapa sasa ndo mziki ulipo na hapa sio kila Unmotivated,Unknowledgable person anaweza ku dive in.
 
it does not necessary require Deep Knowledge especially executable unayo i reverse engineer kama imeandikwa kwa language ambazo zina generate intermediate language kama C# au Java.
Kwa hizo lugha mbili e.g Kwenye Java mtu kama ame distribute executable yake kama JAR haiitaji rocket science kuona source code yake same applies akiifanya JAR file kuwa .EXE kama ametumia some free stuffs au cheaper means inakua rahisi zaidi bila kusahau Android APKs kama developer hajafanya Code Obfuscation na Pro-Guard imekula kwake unai reverse kilaini.
Tukija C# na VB.NET ngoma ni ile ile hauitaji rocket science kuona source code ya developer...na hata kama ame Obfuscate source code ukiwa motivated utaisoma though with difficulties.

Kama hiyo cryptolocker imeandikwa kwa C/C++(which is the most obvious case) hapa sasa ndo mziki ulipo na hapa sio kila Unmotivated,Unknowledgable person anaweza ku dive in.

ni c++ so nimebidi nizame kwenye ram stacks,heap memory na data dumps kwa kutumia debugger ndo maana nimesema inahitaji deep knowledge.Kwa lugha kama Java it's true decompiler zko nyingi Na ni effective sana.Ila hzo lugha zina abstractions sana mimi nataka niende deep mpaka kwenye userland space kwenye memory nione zle Opcode's Na kama possible ata kwenye kernel address space
 
Back
Top Bottom