Miasm retweeted
While there are several frameworks for #reverseengineering that provide features we needed to see
through Wslink’s virtual-machine-based obfuscator, we used @MiasmRe in this project simply because
it’s actively maintained and we’re already familiar and satisfied with it. 4/5
Little update: based on the great @NCCGroupInfosec blog post (research.nccgroup.com/2021/1…), we added color support for IR and ASM graph output: Thank you guys !
Miasm retweeted
I finally decided to publish my complete toolset written for Tinynuke analysis
You'll find config and injects grabber, dll extractors, Ghidra deobfuscation scripts and @cea_sec miasm based scripts
github.com/Heat-Miser/tinynu…
#Tinynuke #ReverseEngineering #Malware
Miasm retweeted
Giving the workshop on code deobfuscation was great fun. Thanks for your active participation! #HITB2021AMS
Check out code, slides and samples here: github.com/mrphrazer/hitb202…
Congratulation, you both succeeded in:
- resolving the challenge
- writing a great tutorial on how to add a custom architecture in Miasm & exploit the IR!
Writeup for FCSC CTF 2021 - 'VMV'
"Defeating Nested Virtualization with @MiasmRe"
mrt4ntr4.github.io/FCSC21-CT…
I explain how to write a custom architecture in Miasm and then use some pattern detection logic to solve the challenge.
This took most of my time, Hope you guys like it!
Miasm retweeted
If you want to learn more about control-flow graph construction, analysis and loop detection, check out my slide deck. I also wrote a blog post on how these concepts can be easily explored with @MiasmRe.
synthesis.to/2021/03/15/cont…
Miasm retweeted
A good example of automatic code deobfuscation based on pattern matching is stadeo by @ESET. They use @MiasmRe to automatically remove control flow flattening for the stantinko malware family.
github.com/eset/stadeo
Miasm retweeted
Friday, 19:00 GMT+2 at #r2con2020:
In a live coding, I will use @r2gui and @MiasmRe to automatically identify and remove opaque predicates in an APT malware sample.
Check it out: rada.re/con/2020/youtube
Miasm retweeted
Emulating the NotPetya bootloader with @MiasmRe, an article by @la_F0uin3 and myself, translated from an article originally published in @MISCRedac :
aguinet.github.io/blog/2020/…
Code available here: github.com/aguinet/miasm-boo…
For the first time in Miasm : documentation!
github.com/cea-sec/miasm/pul…
Miasm retweeted
Here's what I've learned about disassembling programs using @MiasmRe
williballenthin.com/post/202…
Miasm retweeted
Here's my first set of notes collected while learning @MiasmRe to do Binary Analysis in Python3.
williballenthin.com/post/202…
You can now install Miasm using "pip install miasm" !
See github.com/cea-sec/miasm/rel…