0x6d696368

2.58K subscribers

32 videos

View on YouTube

Latest Videos

Ghidra Patch Diff Correlator Project

Ghidra Patch Diff Correlator Project

0x6d696368

2.7K views·6 years ago

Ghidra Patch Diffing libPNG (via Version Tracking Tool)

Ghidra Patch Diffing libPNG (via Version Tracking Tool)

0x6d696368

3.4K views·6 years ago

Ghidra Fix unaff_ via Set Register Values...

Ghidra Fix unaff_ via Set Register Values...

0x6d696368

4.0K views·6 years ago

Ghidra Fix in_, extraout_, in_stack_ decompiler variables

Ghidra Fix in_, extraout_, in_stack_ decompiler variables

0x6d696368

7.1K views·6 years ago

Ghidra Fix .text function names

Ghidra Fix .text function names

0x6d696368

2.5K views·6 years ago

Ghidra Stack Depth (to detect stack manipulation)

Ghidra Stack Depth (to detect stack manipulation)

0x6d696368

3.0K views·7 years ago

ghidra_scripts GoogleSearch.py (to lookup function names via Google)

ghidra_scripts GoogleSearch.py (to lookup function names via Google)

0x6d696368

774 views·7 years ago

ghidra_scripts SimpleStackStrings.py (to reassemble stack strings)

ghidra_scripts SimpleStackStrings.py (to reassemble stack strings)

0x6d696368

1.7K views·7 years ago

ghidra_scripts colorCallGraphCallsTo.py (using SetBackroundColor and traversing the call graph)

ghidra_scripts colorCallGraphCallsTo.py (using SetBackroundColor and traversing the call graph)

0x6d696368

1.2K views·7 years ago

Ghidra Shadow Hammer (Stage 1 Setup.exe) complete static Analysis

Ghidra Shadow Hammer (Stage 1 Setup.exe) complete static Analysis

0x6d696368

5.5K views·7 years ago

Ghidra Search Program Text... (to find XOR decoding functions in malware)

Ghidra Search Program Text... (to find XOR decoding functions in malware)

0x6d696368

5.2K views·7 years ago

Ghidra Version Tracking

Ghidra Version Tracking

0x6d696368

5.0K views·7 years ago

Ghidra Export Symbols and Load External Libraries (to resolve imported function names)

Ghidra Export Symbols and Load External Libraries (to resolve imported function names)

0x6d696368

10.4K views·7 years ago

Ghidra Data Type Manager Archives and Parse C Source... (resolve function signatures)

Ghidra Data Type Manager Archives and Parse C Source... (resolve function signatures)

0x6d696368

12.5K views·7 years ago

ghidra_scripts RC4Decryptor.py

ghidra_scripts RC4Decryptor.py

0x6d696368

1.1K views·7 years ago

Ghidra Generate Checksum... (to extract hashes of embedded malware artifacts)

Ghidra Generate Checksum... (to extract hashes of embedded malware artifacts)

0x6d696368

1.3K views·7 years ago

Ghidra FunctionID (to identify libraries and code reuse)

Ghidra FunctionID (to identify libraries and code reuse)

0x6d696368

10.4K views·7 years ago

Ghidra Server Shared Projects (using ghidra-server.org)

Ghidra Server Shared Projects (using ghidra-server.org)

0x6d696368

2.4K views·7 years ago

Ghidra Bytes View (to patch binary and export to a working PE file)

Ghidra Bytes View (to patch binary and export to a working PE file)

0x6d696368

10.0K views·7 years ago

Ghidra Fixing Bugs (Fixing PE section import size alignment)

Ghidra Fixing Bugs (Fixing PE section import size alignment)

0x6d696368

990 views·7 years ago

Ghidra Clear Flow and Repair, and Patch Instruction (to defeat anti-disassembly)

Ghidra Clear Flow and Repair, and Patch Instruction (to defeat anti-disassembly)

0x6d696368

5.1K views·7 years ago

Ghidra Scripting (Python) (a quick introduction by implementing pipeDecoder.py)

Ghidra Scripting (Python) (a quick introduction by implementing pipeDecoder.py)

0x6d696368

11.8K views·7 years ago

Ghidra Decompile and compile (to quickly reimplement malware decoding functions)

Ghidra Decompile and compile (to quickly reimplement malware decoding functions)

0x6d696368

11.9K views·7 years ago

Ghidra EditBytesScript (to fixmanipulate PE header to load ShadowHammer setup.exe sample)

Ghidra EditBytesScript (to fixmanipulate PE header to load ShadowHammer setup.exe sample)

0x6d696368

2.6K views·7 years ago

Ghidra Extract and Import ... (to extract resources from PE binaries)

Ghidra Extract and Import ... (to extract resources from PE binaries)

0x6d696368

5.1K views·7 years ago

Ghidra YaraGhidraGUIScript (to generate a YARA signature for threatretro hunting)

Ghidra YaraGhidraGUIScript (to generate a YARA signature for threatretro hunting)

0x6d696368

2.0K views·7 years ago

Ghidra XORMemoryScript (to XOR decode strings)

Ghidra XORMemoryScript (to XOR decode strings)

0x6d696368

4.6K views·7 years ago

Reviewing the PasswordsFAST hardware password safe

Reviewing the PasswordsFAST hardware password safe

0x6d696368

3.3K views·7 years ago

Cold boot attack with RAM transplantation against DDR2

Cold boot attack with RAM transplantation against DDR2

0x6d696368

5.0K views·7 years ago

Hardware reverse engineering gear (Part 2) Communication interfaces

Hardware reverse engineering gear (Part 2) Communication interfaces

0x6d696368

5.6K views·7 years ago

Load More Videos

0x6d696368 - NatokHD | NatokHD