eBook
View in EDS

Reverse Engineering Code with IDA Pro

Bibliographic Details
Title: Reverse Engineering Code with IDA Pro
Description: If you want to master the art and science of reverse engineering code with IDA Pro for security R&D or software debugging, this is the book for you. Highly organized and sophisticated criminal entities are constantly developing more complex, obfuscated, and armored viruses, worms, Trojans, and botnets. IDA Pro's interactive interface and programmable development language provide you with complete control over code disassembly and debugging. This is the only book which focuses exclusively on the world's most powerful and popular took for reverse engineering code. - Reverse Engineer REAL Hostile CodeTo follow along with this chapter, you must download a file called!DANGER!INFECTEDMALWARE!DANGER!...'nuff said - Portable Executable (PE) and Executable and Linking Formats (ELF)Understand the physical layout of PE and ELF files, and analyze the components that are essential to reverse engineering - Break Hostile Code Armor and Write your own ExploitsUnderstand execution flow, trace functions, recover hard coded passwords, find vulnerable functions, backtrace execution, and craft a buffer overflow - Master DebuggingDebug in IDA Pro, use a debugger while reverse engineering, perform heap and stack access modification, and use other debuggers - Stop Anti-ReversingAnti-reversing, like reverse engineering or coding in assembly, is an art form. The trick of course is to try to stop the person reversing the application. Find out how! - Track a Protocol through a Binary and Recover its Message StructureTrace execution flow from a read event, determine the structure of a protocol, determine if the protocol has any undocumented messages, and use IDA Pro to determine the functions that process a particular message - Develop IDA Scripts and Plug-insLearn the basics of IDA scripting and syntax, and write IDC scripts and plug-ins to automate even the most complex tasks
Authors: IOActive
Resource Type: eBook.
Subjects: Reverse engineering--Computer programs, Computer security--Computer programs, Debugging in computer science--Computer programs
Categories: COMPUTERS / Programming / General, COMPUTERS / Security / General
Database: eBook Index
FullText Text:
  Availability: 0
Header DbId: edsebk
DbLabel: eBook Index
An: 227544
RelevancyScore: 875
AccessLevel: 6
PubType: eBook
PubTypeId: ebook
PreciseRelevancyScore: 874.504821777344
IllustrationInfo
Items – Name: Title
  Label: Title
  Group: Ti
  Data: Reverse Engineering Code with IDA Pro
– Name: Abstract
  Label: Description
  Group: Ab
  Data: If you want to master the art and science of reverse engineering code with IDA Pro for security R&D or software debugging, this is the book for you. Highly organized and sophisticated criminal entities are constantly developing more complex, obfuscated, and armored viruses, worms, Trojans, and botnets. IDA Pro's interactive interface and programmable development language provide you with complete control over code disassembly and debugging. This is the only book which focuses exclusively on the world's most powerful and popular took for reverse engineering code. - Reverse Engineer REAL Hostile CodeTo follow along with this chapter, you must download a file called!DANGER!INFECTEDMALWARE!DANGER!...'nuff said - Portable Executable (PE) and Executable and Linking Formats (ELF)Understand the physical layout of PE and ELF files, and analyze the components that are essential to reverse engineering - Break Hostile Code Armor and Write your own ExploitsUnderstand execution flow, trace functions, recover hard coded passwords, find vulnerable functions, backtrace execution, and craft a buffer overflow - Master DebuggingDebug in IDA Pro, use a debugger while reverse engineering, perform heap and stack access modification, and use other debuggers - Stop Anti-ReversingAnti-reversing, like reverse engineering or coding in assembly, is an art form. The trick of course is to try to stop the person reversing the application. Find out how! - Track a Protocol through a Binary and Recover its Message StructureTrace execution flow from a read event, determine the structure of a protocol, determine if the protocol has any undocumented messages, and use IDA Pro to determine the functions that process a particular message - Develop IDA Scripts and Plug-insLearn the basics of IDA scripting and syntax, and write IDC scripts and plug-ins to automate even the most complex tasks
– Name: Author
  Label: Authors
  Group: Au
  Data: <searchLink fieldCode="AR" term="%22IOActive%22">IOActive</searchLink>
– Name: TypePub
  Label: Resource Type
  Group: TypPub
  Data: eBook.
– Name: Subject
  Label: Subjects
  Group: Su
  Data: <searchLink fieldCode="DE" term="%22Reverse+engineering--Computer+programs%22">Reverse engineering--Computer programs</searchLink><br /><searchLink fieldCode="DE" term="%22Computer+security--Computer+programs%22">Computer security--Computer programs</searchLink><br /><searchLink fieldCode="DE" term="%22Debugging+in+computer+science--Computer+programs%22">Debugging in computer science--Computer programs</searchLink>
– Name: SubjectBISAC
  Label: Categories
  Group: Su
  Data: <searchLink fieldCode="ZK" term="%22COMPUTERS+%2F+Programming+%2F+General%22">COMPUTERS / Programming / General</searchLink><br /><searchLink fieldCode="ZK" term="%22COMPUTERS+%2F+Security+%2F+General%22">COMPUTERS / Security / General</searchLink>
PLink https://search.ebscohost.com/login.aspx?direct=true&site=eds-live&db=edsebk&AN=227544
RecordInfo BibRecord:
  BibEntity:
    Classifications:
      – Code: 005.14
        Scheme: ddc
        Type: prePub
    Languages:
      – Code: eng
        Text: English
    Subjects:
      – SubjectFull: Reverse engineering--Computer programs
        Type: general
      – SubjectFull: Computer security--Computer programs
        Type: general
      – SubjectFull: Debugging in computer science--Computer programs
        Type: general
    Titles:
      – TitleFull: Reverse Engineering Code with IDA Pro
        Type: main
  BibRelationships:
    HasContributorRelationships:
      – PersonEntity:
          Name:
            NameFull: IOActive
      – PersonEntity:
          Name:
            NameFull: IOActive
    IsPartOfRelationships:
      – BibEntity:
          Dates:
            – D: 01
              M: 01
              Type: published
              Y: 2008
            – D: 04
              M: 02
              Type: profile
              Y: 2014
          Identifiers:
            – Type: isbn-print
              Value: 9781597492379
            – Type: isbn-electronic
              Value: 9780080558790
          Titles:
            – TitleFull: Reverse Engineering Code with IDA Pro
              Type: main
ResultId 1