Virtualization & Virtual Machines

27 files

1. Ring0Crackme

   By Teddy Rogers

   This time, in new article, I’m not going to talk about any comercial protection. This time I will talk about one interesting crackme from www.crackmes.de which was submitted by Ms-Rem. This crackme has a lots of nice features that make it very very interesting, some of them are IDT/SDT hooks, rootkit tricks to hide process, usage of \Device\PhysicalMemory, 2 process execution, APC, etc…
   
   In this tutorial I’ll cover most of stuff handled by crackme and show you my steps for bypassing it. Also you will see some neet tricks when it comes to softice antiJ , also this will maybe help you to understand how SoftICE can coexist with drivers that hook IDT. Anyway, before we start I wanna say that this crackme is real master piece, and big tnx to Ms-Rem for this crackme.
   

   115 downloads

   0 comments

   Submitted April 14, 2020

2. Reversing a Simple Virtual Machine

   By Teddy Rogers

   Paper analysing and the practice of reverse engineering an executable file protected using a simple virtual machine.
   

   194 downloads

   0 comments

   Submitted April 14, 2020