Basics of ARM/MIPS malware analysis

On one of my honeypot's I found an interesting log line, related to some URL-encoding. I was wondering what's there if I will be able to decode that GET...

Windows logs in PowerShell

I was wondering if anyone of you remember the zap2.c :) I couldn't find "zap2.c for Windows" so I was wondering if I can do something like that... in PowerShell... in Windows... ;) This is what I found:

Playing Winamp

After a while when I started to fuzz Winamp (again), I found my old directory with some (about ~300 files) results, all ready to ‘check them later’… so I think ‘now’ is a good time to do it. Let’s get to work.

Divided Paint

One result from fuzzer described below. 

HTTP Server fuzzing with Burp

In the middle of time I was working on some HTTP server fuzzer created in python. I was wondering if I can get similar results when I will use only Burp proxy. Below example results.

headHunter.py

After reviewing "Python Web Penetration Testing Cookbook" I modified one skeleton script found inside the book. Below you will find some results:

Playing Assasin's APK

In the middle of time I was checking some sample malwares from excellent Contagio’s Blog.  This time I decided to get back to APK files. Below you will find small analysis of Assassins_Creed.apk.

Playing with Contagio

(Still) during my „little break”, I found some directory on my disk with few samples from excellent Contagio’s Blog. I decide to check few of them, this time related to web attacks. 

Testing Meld vs PlumeCMS

TL;DR – check Meld for diffing source code. I think you will like it ;)

Crash gdb in Kali

Couple of few days ago I tried to finish one cool CTF (writeup will be here as soon as I will finally finish it;)). Because I had some troubles with that, I decide to take a ‘little break’ and move to “something else”, which was… debug in Linux. ;)