0
Reverse Engineering
with
By –
Abhay Vaish
twitter.com/abhaythehero
Reverse Engineer probably …
Lets brush up some basics !
 General-Purpose CPU Registers
 The Stack, The Heap
 Breakpoints
 1. Software Breakpoints...
How can python help ?
 Portability to various systems and architectures.
 Easy to code. I mean damn easy. Tools for RE o...
http://pythonarsenal.erpscan.com/
Oh yeah it is an arsenal. No sweat !
Magic of ctypes
calling windows api using
ctypes
pydbg
Python and Immunity
Debugger
pefile – to parse PE headers
and other sections
From https://code.google.com/p/pefile/wiki/UsageExamples
pydasm – disassembling
machine code to assembly
 Python wrapper for libdasm.
Thank You
Upcoming SlideShare
Loading in...5
×

Reverse engineering with python

1,943

Published on

Learn reverse engineering with python

Published in: Technology
0 Comments
3 Likes
Statistics
Notes
  • Be the first to comment

No Downloads
Views
Total Views
1,943
On Slideshare
0
From Embeds
0
Number of Embeds
0
Actions
Shares
0
Downloads
40
Comments
0
Likes
3
Embeds 0
No embeds

No notes for slide

Transcript of "Reverse engineering with python"

  1. 1. Reverse Engineering with By – Abhay Vaish twitter.com/abhaythehero
  2. 2. Reverse Engineer probably …
  3. 3. Lets brush up some basics !  General-Purpose CPU Registers  The Stack, The Heap  Breakpoints  1. Software Breakpoints  2. Memory Breakpoint  3. Hardware Breakpoints
  4. 4. How can python help ?  Portability to various systems and architectures.  Easy to code. I mean damn easy. Tools for RE often need to be made on short deadlines  Quick Networking protocols implementation  Great libraries and online community  Leverage multiple projects and chain them  Automation ninja.  RE related code sometimes (almost every time !) is too painful to understand. Enter python m/
  5. 5. http://pythonarsenal.erpscan.com/ Oh yeah it is an arsenal. No sweat !
  6. 6. Magic of ctypes
  7. 7. calling windows api using ctypes
  8. 8. pydbg
  9. 9. Python and Immunity Debugger
  10. 10. pefile – to parse PE headers and other sections From https://code.google.com/p/pefile/wiki/UsageExamples
  11. 11. pydasm – disassembling machine code to assembly  Python wrapper for libdasm.
  12. 12. Thank You
  1. A particular slide catching your eye?

    Clipping is a handy way to collect important slides you want to go back to later.

×