The Curious Engineer

All blogs / Reverse engineering

Reverse Engineering

reverse.put.as

Reverse Engineering and Security for fun!

Reverse engineeringSecurity

’05’10’15’20’25
Posts
211 from 1 Jan 2001 to 21 Sep 2026
Posting
now and then (2 in the last year)
Kind
personal blog
Feed
https://reverse.put.as/index.xml

2026 2

  1. Linesignal
  2. It's a pre-auth, stupid!

2025 5

  1. This blog is 18th years old already!
  2. Bringing Metal to a crypto backdoor fight! Exploiting the GPU and the 90s crypto wars to crack the APT Down code signing keys
  3. It's the certificates, stupid!
  4. clownpertino - A simple macOS debugger detection trick
  5. Cracking the Crackers

2024 2

  1. Flare-On 2024 Challenge #5 - sshd
  2. Abusing Go's infrastructure

2023 1

  1. Attacking the heart of an OpenRG modem

2021 3

  1. Knock Knock! Who's There? - An NSA VM
  2. How to build a custom and distributable lldb
  3. How to use GitHub Actions and private repositories to deploy a Hugo static site

2020 5

  1. The Finfisher Tales, Chapter 1: The dropper
  2. Is macOS under the biggest malware attack ever?
  3. Blog Update
  4. FruitFly's dropper script and its missing tricks
  5. Why I Left Twitter

2019 2

  1. How to make LLDB a real debugger
  2. Crafting an EFI Emulator and Interactive Debugger

2018 4

  1. Keygenning Carbon Copy Cloner Keychain Password
  2. Reversing and Keygenning qwertyoruiop's Crackme
  3. lldbinit - Improving LLDB
  4. Measuring OS X Meltdown Patches Performance

2017 7

  1. Exploiting CVE-2017-5123
  2. How to compile AFL's LLVM mode in OS X
  3. Papers
  4. gdbinit
  5. Blog migration to Hugo
  6. Armory Sandbox – Building a USB analyzer with USB armory
  7. EFI Swiss Knife – An IDA plugin to improve (U)EFI reversing

2016 5

  1. Shut up snitch! – reverse engineering and exploiting a critical Little Snitch vulnerability
  2. Apple EFI firmware passwords and the SCBO myth
  3. SyScan360 Singapore 2016 slides and exploit code
  4. The Italian morons are back! What are they up to this time?
  5. Reversing Apple’s syslogd bug

2015 12

  1. Gatekeerper – A kernel extension to mitigate Gatekeeper bypasses
  2. London and Asia EFI monsters tour!
  3. Rootfool – a small tool to dynamically disable and enable SIP in El Capitan
  4. Writing Bad @$$ Lamware for OS X
  5. BSides Lisbon and SECUINSIDE 2015 presentations
  6. Reversing Prince Harming’s kiss of death
  7. The Empire Strikes Back Apple – how your Mac firmware security is completely broken
  8. How to fix rootpipe in Mavericks and call Apple’s bullshit bluff about rootpipe fixes
  9. How to bypass Google’s Santa LOCKDOWN mode
  10. BadXNU, a rotten apple! – CodeBlue 2014, SyScan 2015 slides and source code
  11. https is now (finally) supported!
  12. Happy New Year!

2014 13

  1. Patching what Apple doesn’t want to or how to make your “old” OS X versions a bit safer
  2. Can I SUID: a TrustedBSD policy module to control suid binaries execution
  3. The double free mach port bug: The short story of a dead 0day
  4. Shakacon #6 presentation: Fuck you Hacking Team, From Portugal with Love.
  5. About the processor_set_tasks() access to kernel memory vulnerability
  6. Revisiting Mac OS X Kernel Rootkits Phrack article is finally out!
  7. Rex vs The Romans – Anti Hacking Team Kernel Extension
  8. Teaching Rex another TrustedBSD trick to hide from Volatility
  9. Don’t die GDB, we love you: kgmacros ported to Mavericks.
  10. Analysis of CoinThief/A "dropper"
  11. AppleDoesntGiveAFuckAboutSecurity iTunes Evil Plugin Proof of Concept
  12. Updated version of Onyx The Black Cat
  13. Linux/HackingTeamRDorks.A, a “new” and improved version of Linux/CDorked.A

2013 17

  1. Breaking OS X signed kernel extensions with a NOP
  2. One small patch for GDB, one giant leap for reversers!
  3. Why ESET’s OS X Rootkit Detector is useless...
  4. SyScan360 Beijing slides
  5. HiTCON 2013 slides
  6. Gone in 59 seconds: tips and tricks to bypass AppMinder’s Jailbreak detection
  7. Another gift: Crackme #1 source code from hell!
  8. Clapzok.A: reversing the OS X part of a multiplatform PoC infector
  9. Gimmedebugah: how to embedded a Info.plist into arbitrary binaries
  10. The "all" new Onyx The Black Cat!
  11. NoSuchCon #1 debrief and slides
  12. Hydra, the sample util I am unable to describe!
  13. There is an error in my SyScan slides!
  14. SyScan13: Revisiting Mac OS X Rootkits presentation
  15. How to compile GDB in Mountain Lion (updated)
  16. OS.X/Boubou – Mach-O infector PoC source code
  17. Ice the Guardian v2, the OS X anti-lamware

2012 31

  1. Happy new year, 2013 edition!
  2. A quick review of Mac OS X and iOS Internals – To the Apple’s Core
  3. Otool-ng – a set of small patches to Apple’s otool
  4. Kextstat_ASLR util or how to start hiding your kernel rootkit in Mountain Lion
  5. 5 years of reverse.put.as
  6. My first Hackintosh
  7. OS X Malware at Confraria de Segurança da Informação presentation slides
  8. Tales from Crisis, Chapter 4: A ghost in the network
  9. Tales from Crisis, Chapter 3: The Italian Rootkit Job
  10. Tales from Crisis, Chapter 2: Backdoor’s first steps
  11. Tales from Crisis, Chapter 1: The dropper’s box of tricks
  12. ExtractMachO: an IDA plugin to extract Mach-O binaries from disassembly
  13. HITCON 2012 Review and slides
  14. Secuinside 2012 Review and Slides
  15. See you in Asia!
  16. "Sandwich" CrackMe tutorial by qwertyoruiop
  17. A little social and economics experiment
  18. How to compile GDB for iOS!
  19. gdbinit v8.0: simultaneous support for x86/x86_64 and ARM architectures!
  20. Dynamic Code Encryption in OS X: the crackme example!
  21. A small improvement to OS X “rootkitery”: bruteforcing sysent discovery, fast & easy!
  22. AV-monster: the monster that loves yummy OS X anti-virus software
  23. Obfuscation #2: Playing entrypoint hide & seek game with dyld
  24. A little more fun with Mach-O headers: adding and spoofing a constructor
  25. Anti-disassembly & obfuscation #1: Apple doesn’t follow their own Mach-O specifications?
  26. Anti-debug trick #1: Abusing Mach-O to crash GDB
  27. We have a crackme winner!!!
  28. My first crackme... from hell, I hope :-)
  29. A Mac OS X port of Phrack’s CheckIDT util by kad, or another way to retrieve sysent address
  30. gdbinit v7.4.4 – the skip command
  31. Some comments about plugin-alliance.com protection...

2011 38

  1. Merry Christmas, Happy New Year and some notes...
  2. Evil iTunes Plugins from Hell
  3. gdbinit v7.4.3
  4. Display Mach-O headers plugin for IDA
  5. How to create IDA C/C++ plugins with Xcode
  6. Using OS X TrustedBSD framework to protect critical files
  7. Poking around Sentinel HASP Envelope for Mac OS X :-)
  8. A small rant about dongles: the developer who can’t correctly implement a HASP!
  9. Fixes for the TrustedBSD backdoor – Rex the wonder dog v0.2
  10. Abusing OS X TrustedBSD framework to install r00t backdoors...
  11. 4th anniversary...
  12. Apple Sandbox Guide v1.0
  13. Apple’s Sandbox Guide v0.1 – early draft release
  14. Using Apple’s sandbox feature for reversing purposes
  15. Removing iTunes 10.4 m3u processing feature with a small loader
  16. Another patch for Apple’s GDB: the define/commands problem
  17. How GDB disables ASLR in Mac OS X Lion
  18. gdbinit v7.4.2, Github and Twitter
  19. gdbinit v7.4
  20. Added a new page, Papers & Presentations
  21. A little vulnerability in The Heist iOS game or how to get (more) free Steam codes for Eets game!
  22. How to remove iPad/iPhone/iPod Touch encrypted backups password if you forgot it
  23. An interview with CrackZ and (incomplete) source code to Contract Killer "trainer"
  24. Newsflash: How to fuck up 40 million USD – The New York Times paywall and its iPad app
  25. Hacking a freemium iOS app: Contract Killer … or unlimited play without spending a dime (or any other currency)
  26. Small update to gdbinit and to the website
  27. Update to GDB patches – fix for a "new" bug
  28. There’s a new protection in town, Software Passport, from the developers of Armadillo :-)
  29. It’s not my war but...
  30. Universe’s best and legal Mac OS X reversing tutorial for newbies (or maybe not!)
  31. Another update to gdbinit for iOS and ARM support to ptool.pl and offset.pl
  32. Need help with code signing in iOS!
  33. gdbinit v0.1 for iOS (iPad at least :-))
  34. How to make an iPad connect thru a ssh SOCKS proxy + iOS "spyware"
  35. Why cracking the vast majority of Mac apps isn’t that sexy...
  36. Reversing the exit(173) from the Mac App Store
  37. The sad state of reverse engineering software/hardware protections
  38. The Mac App Store... Security broken by design?

2010 11

  1. A semi-automated way to find sysent
  2. A new GDB frontend and some pics from the past
  3. GDB anti-debug, Otool/otx anti-disassembly… It’s Challenge number 3 !!!
  4. How to Keygen MSJ Kracking Challenge ’10 – Challenge #1
  5. Very small update...
  6. Onyx the Black Cat v0.4 for Snow Leopard
  7. OS X Crackmes
  8. gdbinit v7.3
  9. reverse.put.as is back in a new format...
  10. Brief analysis of the VLOK protection
  11. A new util to process Mach-O binaries information (or a replacement to otool -l)

2009 28

  1. Happy new year and a small christmas gift!
  2. Snow Leopard impact into reverse engineering world...
  3. Small gdbinit update...
  4. GDB patches
  5. Anatomy of a GDB anti-debug trick part II: GDB isn’t alone!
  6. Reversing Pokerstars online poker client (I hope they aren’t from Vegas !!!)
  7. Anatomy of a GDB anti-debug trick
  8. Fix for Apple’s GDB bug or why Apple forks are bad...
  9. Workaround for Apple’s GDB bug...
  10. gdbinit 7.1.7 and some bla bla bla...
  11. A little disassembler for MPress packer...
  12. How to dump a MPress packed binary...
  13. A memory dumper for Apple crypted binaries! Hurray !!!
  14. How to dump an Apple protected binary
  15. "Removing" Apple code signing from a binary...
  16. Cracking a Mac OS X Screensaver
  17. A bunch of old tutorials...
  18. Defeating Little Snitch and thinking about piracy...
  19. Onyx The Black Cat v0.3
  20. Mach-O binary offset calculator
  21. Why is kernel debugging fun?
  22. Mac OS X Kernel debugging with VMware
  23. Serial phishing tutorial !!! It’s hot hot hot ;)
  24. World’s best Mac OS X reversing tutorial for newbies (or maybe not!)
  25. iWork/Photoshop Trojan or Botnet Binary found
  26. Gdbinit v7.1.6
  27. How to compile GDB and other Apple open source packages in Mac OS X
  28. Mailing list and IRC channel

2008 20

  1. More gdbinit addons!
  2. A lazy xmas gift or a lazy addon to gdbinit
  3. Apple’s GDB Bug?
  4. What’s wrong in this picture?
  5. gdbinit version 7.0 (and 7.1)
  6. Onyx The Black Cat v0.2
  7. Extended attributes in Mac OS X and Remote Buddy
  8. Onyx The Black Cat v0.1 – Anti Anti-debug kernel module
  9. The IDA Pro Book: The Unofficial Guide to the World’s Most Popular Disassembler
  10. "Hacker" Challenge
  11. PTHPasteboard 4.4.0! Generic Mac OS X protector is found?
  12. News...
  13. Little Snitch continued or the broken nib files!
  14. Kernel module for syscall interception and fixing ptrace
  15. Mac OS X Age of Empires III 1.0.4 NO CD patch
  16. Mac OS X Code injection
  17. More Mac OS X anti-debugging
  18. How to bypass a protection with a single byte
  19. Reversing You Control Desktops v1.2
  20. How to change /etc/hosts

2007 3

  1. Change network card MAC address
  2. GDB input radix option
  3. Must have tools

2001 2

  1. Crackmes
  2. Patches