#Reverse Engineering
2 articles filed under this tag
Client-Side Password Validation Explained: When Your Password Checker Builds Its Own Tiny CPU
A password checker can look wonderfully complicated, decrypt code at runtime, and even run a custom virtual machine. That still does not make the secret unbreakable. Here is how to pull the VM apart, recover its instructions, and reverse the final checks.
Encrypted C2 Loader Explained: Correlating PCAP, Memory, and a Hidden Stage
This challenge started with exactly two artifacts: `capture.pcapng` and `DbgInfo.DMP`. From there, the investigation moved through C2 decryption, screenshot and binary recovery, and reverse engineering of a loader that hid an encrypted in-memory stage.