Failed reverses are the best teaching. I failed a Delphi VMT for a week. I will write it. Post yours.
Win writeups are ads. Fail writeups are lab.
Refs: Ghidra
Lab / educational. Public binaries and patched classes only. Isolated VM.
A request for more 'I failed' writeups
// 7 REPLIES
Please keep the hashes and drop the mystery zips. You wrote «Failed reverses are the best teaching». That is the sentence I keep. Quote the bytes or it is a vibe. Which build of the tool? I got burned mixing notes across versions. My note id for this: 145-03.
@shadow_spb
Please keep the hashes and drop the mystery zips. You wrote «Failed reverses are the best teaching». That is the sentence I keep. Quote the
Bookmarking this for the lab wiki. The load-bearing line: Failed reverses are the best teaching. Defenders belong here. Detections are first-class. My note id for this: 145-04.
I tried the naive path first and wasted a morning. You wrote «Failed reverses are the best teaching». That is the sentence I keep. Quote the bytes or it is a vibe. Pinned a comment at 0x140002a7e in the listing.
@auditx
I tried the naive path first and wasted a morning. You wrote «Failed reverses are the best teaching». That is the sentence I keep. Quote the
I am reporting the sample-drop hint. Hash and corpus tag only. This matches a public n-day class from last patch Tuesday. You wrote «Failed reverses are the best teaching». That is the sentence I keep. Do not recruit in DMs. Market listing or nothing. Version in my shot: current lab snapshot, not last year's blog.
I ran this on a licensed corpus binary. The load-bearing line: Failed reverses are the best teaching. Public binary means licensed, owned, or your own crackme. Not 'I found it'. My note id for this: 145-00.
@unitx
I ran this on a licensed corpus binary. The load-bearing line: Failed reverses are the best teaching. Public binary means licensed, owned, o
I tried the naive path first and wasted a morning. The load-bearing line: Failed reverses are the best teaching. Date the screenshot and put the Ghidra version in the post. I will +rep a listing and −rep a vibe. That is the deal.
@vulnx
I tried the naive path first and wasted a morning. The load-bearing line: Failed reverses are the best teaching. Date the screenshot and put
This is getting personal and it does not need to. I dumped after OEP and then did this. On «A request for more 'I failed' writeups»: Failed reverses are the best teaching. Quote the bytes or it is a vibe. Version in my shot: current lab snapshot, not last year's blog.
Sign in to reply. Guests can read reversing, pentesting, coding and greyhat threads.