ReverseEngineering

Tracking malicious code execution in Python https://rushter.com/blog/python-code-exec @reverseengine

تا اینجا، اسمبلی رو کامل یاد گرفتیم، هرچی نیاز بود، و گفتم و الان نوبت یاد گرفتن سیستم عامله، این بخش خیلی مهمه. So far, we have learned assembly completely, everything we needed, and now it's time to learn the operating system. This is a very important part.

🟢 2️⃣ Thread Thread = واحد اجرای داخل Process هر Process حداقل یک Thread داره هر Thread: Stack جدا داره رجیسترهای جدا دارد ولی حافظه Process مشترک است خیلی مهم: چون بعضی رفتارها در Threadهای جدا اجرا میشن و در دیباگ باید Thread درست رو دنبال کنید 🟢 2️⃣ Thread Thread = Unit of execution within a Process Each Process has at least one Thread Each Thread: Has a separate Stack Has separate registers But the Process memory is shared Very important: Because some behaviors are executed in separate Threads and in debugging you must follow the correct Thread @reverseengine

سیستم‌عامل برای مهندسی معکوس 🟢 1️⃣ Process (پروسس) Process = یک برنامه در حال اجرا وقتی یک فایل اجرایی اجرا میشه سیستم‌عامل یک Process میسازه به اون PID میده یک فضای حافظه جدا اختصاص میده رجیسترها و context مخصوص داره هر Process: حافظه جدا داره Stack و Heap جدا داره ماژول‌ها (DLL / SO) خودش رو داره داخل مهندسی معکوس مهمه چرا: چون باینری که تحلیل میکنید داخل یک Process اجرا میشه و همه چیز داخل همین فضا اتفاق میوفته Operating System for Reverse Engineering 🟢 1️⃣ Process Process = A running program When an executable file is executed The operating system creates a Process, gives it a PID, allocates a separate memory space, and has its own registers and context Each Process: Has a separate memory Has a separate Stack and Heap Has its own modules (DLL / SO) Why is reverse engineering important: Because the binary you are analyzing is executed inside a Process and everything happens inside this space @reverseengine

19 Shades of LockBit5.0 https://www.levelblue.com/blogs/spiderlabs-blog/19-shades-of-lockbit5.0-inside-the-latest-cross-platform-ransomware-part-1 @reverseengine

SectorC: a C compiler in 512 bytes https://xorvoid.com/sectorc.html

How LLMs feed Your RE Habit https://clearbluejar.github.io/posts/how-llms-feed-your-re-habit-following-the-uaf-trail-in-clfs @reverseengine

امیدوارم حالتون خوب باشه، به زودی دوباره شروع می‌کنیم 🖤 I hope you are well, we will start again soon ❤️‍🩹

حالم اصن خوب نیست خودتون دلیلشو میدونید وقتی خوب شدم دوباره فعالیت مثل قبل میشه عذر میخام💔 I'm not feeling well at all. You know the reason. When I get better, I'll be back to being active like before. I apologize🖤

Embedded Systems Hacking Roadmap https://voidstarsec.com/roadmap @reverseengine

19 Shades of LockBot5.0 https://www.levelblue.com/blogs/spiderlabs-blog/19-shades-of-lockbit5.0-inside-the-latest-cross-platform-ransomware-part-1 @reverseengine

Defeating Anti-Reverse Engineering: A Deep Dive into the 'Trouble' Binary https://binary.ninja/2026/01/23/reversing-linux-anti-re.html @reverseengine

0⃣🎄 Happy new year 🎅🏻1⃣

ببخشید، امتحان های دانشگاه هست، نمیرسم بعد از این که تموم شدن قوی تر ادامه میدیم. Sorry, I have university exams, I can't make it. We'll continue stronger after they're over.

The Intezer Analyze IDA Pro plugin is now available to community users https://intezer.com/blog/intezer-analyze/ida-pro-plugin-now-available-to-the-community @reverseengine

Cracking BattlEye packet encryption https://secret.club/2020/06/19/battleye-packet-encryption.html @reverseengine

Stealthy Windows audio-capture tool https://github.com/Drew-Alleman/wiretap @reverseengine

How to unc0ver a 0-day in 4 hours or less https://googleprojectzero.blogspot.com/2020/07/how-to-unc0ver-0-day-in-4-hours-or-less.html @reverseengine

efiSeek for Ghidra https://github.com/DSecurity/efiSeek @reverseengine