Internet of Things

Cyber in the 21st Century

Cyber Security

Is Cyber Security your business? My daytime job has me working as a senior manager for a Cyber Security company. I practice the age old-art of Adversarial Science in the digital domain. As part of this job, I need to stay aware of the latest in security practices and tools. "It is said that if you know your enemies and know yourself, you will not be imperiled in a hundred battles; if you do not know your enemies but do know yourself, you will win one and lose one; if you do not know your enemies nor yourself, you will be imperiled in every single battle." - Sun Tzu.

Assembly Language

When I am not busy securing computers, I like the challenge of cracking programs with both commercial and free tools. Code Reversing (cracking) is always a fun challenge. To get started, you need a disassembler. So, what is a disassembler? In short, it's a program that translates an executable file to assembly language. The most popular disassembler is IDA Pro, but there are free programs available too. Check out OllyDbg and read a few tutorials to get you started.

IDA Pro

IDA Pro is a very convenient and very powerful tool for disassembly. It has a huge number of instruments that allow you to disassemble quickly. It can show the function call tree, parse import and export of the executable, and show information about them; it can even show the code in C, making life much easier for those who aren't very good at understanding assembly. Knowing how to protect a computer against security threats can greatly increase your chances of not being hacked.

OllyDbg

OllyDbg

OllyDbg is probably the best debugger that you can find for reverse engineering software. It was essentially built for the needs of reversing and has all needed tools for that purpose – including a built-in disassembler with the ability to analyze and identify key data structures, an import and export analysis feature, and a built-in assembling and patching engine. The ability to parse API functions and their parameters makes it very easy to reverse interactions with a system. The stack view is shows a lot of information about the call stack. One more important advantage is that you may use OllyDbg with applications that are debug-protected – the situations where usual debuggers just can’t do anything.

Get Started