aljaz/securedorg.github.io
1
0
Fork 0
mirror of https://github.com/aljazceru/securedorg.github.io.git synced 2025-12-23 08:54:23 +01:00
Code Issues Packages Projects Releases Wiki Activity

adding restart button

Browse Source
This commit is contained in:
Amanda Rousseau
2017-03-28 15:34:58 -07:00
parent d17b56f0cb
commit b8e0379fd2
3 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
dynamic.md
View File

@@ -39,7 +39,8 @@ You will need to sync the debugger and disassembler addresses so you can follow
### XOR Decode Function ### XOR Decode Function
Remember use the F2(breakpoint), F7(Step Into), F8(Step Over), F9(Run) keys to navigate through the debugger. Remember use the F2(breakpoint), F7(Step Into), F8(Step Over), F9(Run) keys to navigate through the debugger. If you accidentally run past the end the of the program you can always restart by clicking ![alt text](https://securedorg.github.io/images/restart.png "restart").
![alt text](https://securedorg.github.io/images/dyn6.png "xordecode") ![alt text](https://securedorg.github.io/images/dyn6.png "xordecode")
In **IDA**, get the offset of the XorDecode function you saved prior. In **IDA**, get the offset of the XorDecode function you saved prior.

BIN
images/restart.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 5.5 KiB

2
static.md
View File

@@ -117,7 +117,7 @@ We can assume that this function is doing some kind of Xor encoding. So let's re
Let's use the tool **XORSearch** to see if we can find some interesting xor decoded strings. Open the terminal **cmd.exe** from the start bar, and navigate to the XORSearch.exe Let's use the tool **XORSearch** to see if we can find some interesting xor decoded strings. Open the terminal **cmd.exe** from the start bar, and navigate to the XORSearch.exe
```XORSearch.exe <Path to Unknown.exe> "A string to test"``` ```XORSearch.exe <Path to UnknownUnpacked.exe> "A string to test"```
*Click Image to Enlarge* *Click Image to Enlarge*
[![alt text](https://securedorg.github.io/images/static6.png "xor search")](https://securedorg.github.io/images/static6.png) [![alt text](https://securedorg.github.io/images/static6.png "xor search")](https://securedorg.github.io/images/static6.png)