Recent posts

TypePostAuthorRepliesLast updated
Imagelibemu - detecting initializing code infront of GetPC - traversal EBX markus.koetter09 years 28 weeks ago
Imagelibemu - detecting initializing code infront of GetPC - after GetPC markus.koetter09 years 28 weeks ago
Imagelibemu - detecting initializing code infront of GetPC - decoder markus.koetter09 years 28 weeks ago
Imagelibemu - how does libemu work - GetPC via fnstenv markus.koetter09 years 28 weeks ago
Imagelibemu - how does libemu work - GetPC via call markus.koetter09 years 28 weeks ago
Imagelibemu - emulation based processing - Summary markus.koetter09 years 28 weeks ago
Imagelibemu - emulation based processing - SetUnhandledExceptionFilter markus.koetter09 years 28 weeks ago
Imagelibemu - emulation based processing - closesocket again markus.koetter09 years 28 weeks ago
Imagelibemu - emulation based processing - WaitForSingleObject markus.koetter09 years 28 weeks ago
Imagelibemu - emulation based processing - CreateProcessA markus.koetter09 years 28 weeks ago
Imagelibemu - emulation based processing - closesocket markus.koetter09 years 28 weeks ago
Imagelibemu - emulation based processing - accept markus.koetter09 years 28 weeks ago
Imagelibemu - emulation based processing - listen markus.koetter09 years 28 weeks ago
Imagelibemu - emulation based processing - bind markus.koetter09 years 28 weeks ago
Imagelibemu - emulation based processing - WSASocketA markus.koetter09 years 28 weeks ago
Imagelibemu - emulation based processing - WSAStartup markus.koetter09 years 28 weeks ago
Imagelibemu - emulation based processing - loadlibrary markus.koetter09 years 28 weeks ago
Imagelibemu - emulation based processing - resolving function addresses using hashes markus.koetter09 years 28 weeks ago
Imagelibemu - emulation based processing - kernel32 base address via PEB markus.koetter09 years 28 weeks ago
Imagelibemu - emulation based processing - decoder markus.koetter09 years 28 weeks ago
Imagelibemu - emulation based processing - getpc markus.koetter09 years 28 weeks ago
PageThe Norwegian Chapter - www.honeynor.no sjur.usken09 years 28 weeks ago
Blog entryMy usenix WASL 2008 slides are available sebastien.tricaud09 years 28 weeks ago
PageHoneynet Project Challenges lance.spitzner09 years 28 weeks ago
Book pageKnow Your Enemy: Sebek lance.spitzner09 years 28 weeks ago