2of1

half a nibble of another

Installing IDA Pro on a 64-bit flavour of Linux is a bit of a business – mostly because there is no 64-bit version of IDA (yet).
Read the rest of this entry »

Two Thursday evenings ago saw the first ever DC9723 hackathon.

The evening was a great success and I certainly enjoyed it; both the social aspects and the ‘hacking’ (not to mention the free Pizza, Elbit laptop bag and fantastically fun RSA challenge which I partially did a few days later)! Kol HaKavod to Iftach Ian Amit and Itzik Kotler for making this – and DC9723 in general – happen!

I worked in a group together with a bunch of other guys dealing with creating a PoC mobile botnet for the Android platform (yes I know one already exists – but that was based on a slightly different concept). As the evening was only 5 hours long (hoping for a 24 hr hackathon next year!!), we didn’t get much coding done – except for the client-side guys; they did great!
We’re hoping to continue working on the project in our spare time to see what we can come up with, so *watch this space*.

For those who didn’t attend and want (read: must) to see what the fuss is all about, check out here and here (nice paper scan version).
Some pics from the event are available here.

Here are the slides and code examples of the talk that I gave at the 7th DC9723 meet a few weeks ago.

To all those that came; thanks – I hope you found it interesting!

Often embedded images sit compressed (deflated) on the flash. Usually the bootloader is responsible for decompressing (inflating) the image and loading it into RAM.

I come across these quite often in the embedded reverse engineering work I do (dumping compressed flash mem).
I finally decided to write a simple python script to do the job of decompression (excuse the python, not my strongest skill ).
Read the rest of this entry »