Archives
Category Archive
for: ‘Featured’

RE-Google – IDA Pro Plugin that queries Google Code

RE-Google is a plugin for the Interactive DisAssembler (IDA) Pro that queries Google Code for information about the functions contained in a disassembled binary. The top results are then displayed as comments to the function and can be opened by just clicking on it. The top results will often tell you what to the function is actually doing or what you will find in the inside.

Read More

Preventing the Exploitation of Structured Exception Handler (SEH) Overwrites with SEHOP

The purpose of the SEHOP mitigation is to prevent an attacker from being able to make use of the Structured Exception Handler (SEH) overwrite exploitation technique.

Read More

Enhanced Mitigation Evaluation Toolkit – A toolkit to apply security mitigation technologies to arbitrary applications

Microsoft has released a new toolkit for hardening binary applications without the need of recompilation. It is called Mitigation Evaluation Toolkit – A toolkit to apply security mitigation technologies to arbitrary applications.

Read More

Simple function call versus __fastcall

The __fastcall calling convention specifies that arguments to functions are to be passed in registers, when possible. The following list shows the implementation of this calling convention.

Read More