1. 1. Encouragement for Reverse Code Engineering Speaker Hiroki Matsukuma (a.k.a. hhc0null) : 2013/12/19
2. 2. !!! CAUTION !!! !!! !!!
3. 3. Speaker Hiroki Matsukuma (a.k.a. hhc0null) - - - '12
4. 4. RCE RCE - - -
5. 5. - - - > > RCE
6. 6. - - ( ) - RCE
7. 7. / - Static Program Analysis > - Dynamic Program Analysis >
8. 8. - Static Analysis > > >
9. 9. - Dynamic Program Analysis > > >
10. 10. - ELF Linux, etc... > Executable and Linkable Format > Linux - PE Windows > Portable Executable > Windows
11. 11. ELF - objdump > > objdump -d program > program.asm > objdump -T program > refs - readelf > > readelf -a program > sections - objconv > > objconv -fgasm -nu program
12. 12. ELF - objdump > > objdump -d program > program.asm > objdump -T program > refs - readelf > > readelf -a program > sections - objconv > > objconv -fgasm -nu program
13. 13. ELF - objdump > > objdump -d program > program.asm > objdump -T program > refs - readelf > > readelf -a program > sections - objconv > > objconv -fgasm -nu program
14. 14. PE - IDA Pro > > > >
15. 15. 1. ELF (incorrect program) - objdump+gdb > gdb
16. 16.
17. 17. 2. PE - IDA Pro + ollydbg > ollydbg > 2
18. 18. - >
19. 19. Encouragement for Reverse Code Engineering Thank you for listening!