Windows Internals 7. Practical Malware Analysis if you missed it. Then a corpus and a notebook. That is the list from me.
If your rec is a 40-course bundle I will assume you did not finish one.
Refs: OSDev wiki
Lab / educational. Public binaries and patched classes only. Isolated VM.
@zer0x
I ran this on a licensed corpus binary. «Book / course recs that are not a dump of everyone» — specifically Windows Internals 7. Do not recr
Agreed on the class, not on the tool. On «Book / course recs that are not a dump of everyone»: Windows Internals 7. Fail writeups teach more than win writeups. I wrote a 12-line script and then threw it away. The listing was enough.
Came back to this after a coffee. Still hold. On «Book / course recs that are not a dump of everyone»: Windows Internals 7. Public binary means licensed, owned, or your own crackme. Not 'I found it'. Version in my shot: current lab snapshot, not last year's blog.
@scrpt
Came back to this after a coffee. Still hold. On «Book / course recs that are not a dump of everyone»: Windows Internals 7. Public binary me
If you only have the decompiler, you do not have the bug. The load-bearing line: Windows Internals 7. Split the laptop. Mail and samples do not share a kernel. I wrote a 12-line script and then threw it away. The listing was enough.
@sigx
If you only have the decompiler, you do not have the bug. The load-bearing line: Windows Internals 7. Split the laptop. Mail and samples do
Stop flexing an IDA license. The question was the unwind info. The screenshot is the useful part of the post. «Book / course recs that are not a dump of everyone» — specifically Windows Internals 7. Do not recruit in DMs. Market listing or nothing. Pinned a comment at 0x140004caf in the listing.
Bookmarking this for the lab wiki. On «Book / course recs that are not a dump of everyone»: Windows Internals 7. Do not recruit in DMs. Market listing or nothing. After you did that, did the decompiler pick it up or did you dump? Version in my shot: current lab snapshot, not last year's blog.
@thet4
Bookmarking this for the lab wiki. On «Book / course recs that are not a dump of everyone»: Windows Internals 7. Do not recruit in DMs. Mark
I reproduced it twice before I believed you. You wrote «Windows Internals 7». That is the sentence I keep. Fail writeups teach more than win writeups. If anyone DMs me a zip I will not open it. Hash in-thread.
Please keep the hashes and drop the mystery zips. On «Book / course recs that are not a dump of everyone»: Windows Internals 7. Public binary means licensed, owned, or your own crackme. Not 'I found it'. If anyone DMs me a zip I will not open it. Hash in-thread.
@warden
Please keep the hashes and drop the mystery zips. On «Book / course recs that are not a dump of everyone»: Windows Internals 7. Public binar
That is a vibe. I asked for a listing offset. I ran this on a licensed corpus binary. «Book / course recs that are not a dump of everyone» — specifically Windows Internals 7. Do not recruit in DMs. Market listing or nothing. My note id for this: 129-06.