Minh-Triet Pham Tran trietptm

Malware Research, Collection, and Analysis

All of this information was collected by doing google searches or from the URLs mentioned in the References section. I collected them here because I wanted a single list that I could update, refer to, and share with others. Simply having a link listed here is not necessarily an endorsement. I only have personal experience with a small number of the resources listed here. I did however, make an initial attempt to remove dead links from the reference links. Some good starting points are Lenny Zelster's Reverse-Engineering Malware Cheat Sheet and Analyzing Malicious Documents Cheat Sheet. In fact, as you'll notice in the reference section, Lenny's site is included multiple times. He has some really awesome information.

Mailing Lists and Discussion Forums

http://www.securityfocus.com/archive/138/description http://reddit.c

	04:28 -!- mode/#tutorials [+m] by HockeyInJune
	04:28 <~HockeyInJune> Okay, we'll be starting again in a second.
	04:29 <~HockeyInJune> Exploitation 1 is next at 19 votes.
	04:29 <~HockeyInJune> Let's do that one.
	04:29 <~HockeyInJune> You'll need IDA Demo and a Text Editor.
	04:29 <~HockeyInJune> https://www.hex-rays.com/products/ida/support/download_demo.shtml
	04:29 <~HockeyInJune> http://www.sublimetext.com/
	04:31 <~HockeyInJune> Oh, isn't this a great song?
	04:31 <~HockeyInJune> Alright, let's get started.
	04:31 <~HockeyInJune> The times the are a-changin'

	أساسيات التشفير - رواق
	http://www.rwaq.org/courses/introduction-to-encryption

	Applied Cryptography - UDACITY
	https://www.udacity.com/course/cs387

	Theory and Practice of Cryptography - GoogleTechTalks
	http://youtu.be/IzVCrSrZIX8

	CISSP Training - Cryptography - The Geek Academy

	#!/usr/bin/env python

	"""
	(c) hAsh, 2015 run via ImmunityDbg
	"""
	__VERSION__ = '0.3.1'
	__AUTHOR__ = 'hAsh'

	import immlib
	import pefile

	Windows Registry Editor Version 5.00

	[HKEY_CLASSES_ROOT\*\shell\PIN_run]
	@="Run with PIN"

	[HKEY_CLASSES_ROOT\*\shell\PIN_run\command]
	@="\"C:\\Pin_Tools\run_me.bat\" \"%1\""

	# Flags util (for .gdbinit)
	# set of commands for easy manipulation on FLAGS
	# CC-BY: hasherezade


	define translate_flag
	if $argc == 0
	help translate_flag
	else
	set $retval = (-1)

	#include <windows.h>
	#include <stdio.h>

	int gtfo(const char* text = "")
	{
	printf("gtfo! (%s)\n", text);
	return -1;
	}

	int main(int argc, char* argv[])

	import idaapi
	import idc

	class MemoryPattern(object):
	def __init__(self, pattern, wildcards, patch):
	self._pattern = pattern
	self._wildcards = wildcards
	self._patch = patch

	def compareTo(self, buffer, offset):

	@ECHO OFF
	SETLOCAL

	ECHO ASLR Enable / Diable Batch Script - Please run as admin
	set /p Choice=Want to Enable or Disable ASLR? (e or d):%=%

	if "%Choice%"=="e" goto :ENABLE
	if "%Choice%"=="d" goto :DISABLE

	:ENABLE