The Curious Engineer

All blogs / Reverse engineering

ReWolf's blog

blog.rewolf.pl/blog

Reverse engineering & programming blog

Reverse engineeringWindows internalsSecurityJava / JVM

’10’15’20’25
Posts
53 from 19 May 2007 to 13 Mar 2021
Posting
quiet since 2021
Kind
personal blog
Feed
http://feeds.feedburner.com/RewolfsBlog

2021 1

  1. Reverse engineering Mortal Kombat GRA file format (part 2)

2018 1

  1. Reverse engineering Mortal Kombat GRA file format (part 1)

2017 1

  1. PCAUSA Rawether for Windows local privilege escalation

2016 5

  1. GoGoGadget – kernel exploitation helper class
  2. Leaking EPROCESS address of the specific SYSTEM processes
  3. MSI ntiolib.sys/winio.sys local privilege escalation
  4. IceCTF 2016 Slickserver/Slickerserver pwn writeup
  5. SSCTF 2016 Quals Re5 writeup

2015 7

  1. wow64ext v1.0.0.8
  2. Terminus Project launch.
  3. wow64ext v1.0.0.7
  4. Java VM Operand Stack Viewer
  5. WoW64 internals: Unexpected behaviour of NtQueryDirectoryObject
  6. Reverse engineering Might and Magic III compression
  7. Resolving VMware Workstation 10.0.6 crash

2014 4

  1. dirtyJOE v1.7 (c529)
  2. wow64ext v1.0.0.6
  3. wow64ext v1.0.0.5
  4. Solving warsaw’s Java Crackme 3

2013 9

  1. Java bytecode debugging
  2. dirtyJOE v1.6 (c472)
  3. wow64ext v1.0.0.4 – bugfix release
  4. wow64ext finally compatible with Windows 8
  5. Solving RedBeanSoup’s 1st Crackme (IronPython)
  6. WoW64 internals: Tale of GetSystemFileCacheSize
  7. Evolution of Process Environment Block (PEB)
  8. Solving |sas0|’s “The Game” crackme (.NET)
  9. Debugging ring 3 part of PE/PE+ loader

2012 6

  1. wow64ext library update 2
  2. Solving gim913’s KeygenMe#01
  3. __sse2_available
  4. wow64ext library update
  5. Reading memory of x64 process from x86 process
  6. PEB32 and PEB64 in one definition

2011 10

  1. Random thoughts about embedding python into your application
  2. Windows SuperFetch file format – partial specification
  3. dirtyJOE v1.5 (c359) and some statistics
  4. rep movsb isn’t memcpy()
  5. dirtyJOE v1.4 (c334)
  6. MD5 implementation for GNU Assembler
  7. Mixing x86 with x64 code
  8. UPX “accidentally” increments LoadCount for DLLs
  9. Using Python scripts in dirtyJOE
  10. dirtyJOE v1.4

2010 2

  1. dirtyJOE – Java Overall Editor
  2. When memory management goes bad…

2009 2

  1. Hacker Challenge 2008
  2. Old dbghelp and an old exploit…

2008 1

  1. Hacker Challenge 2007

2007 4

  1. x86 Virtualizer – source code
  2. DLLPackager v1.0 – source code
  3. x86 Virtualizer – Preview
  4. DLLPackager v1.0