Monday, July 15, 2013

Reverse Engineering

this material is a prerequisite for future classes such as Intermediate x86, Rootkits, Exploits, and Introduction to Reverse Engineering.
http://opensecuritytraining.info/IntroX86.html


if you use ubuntu like me you need
 Mirror of CMU Linux Bomb Lab (originally from here)
a Linux system with gcc and gdb

or if  you like a graphical debugger like  OllyDbg
you can use Evan’s Debugger is a Linux replacement for OllyDbg.
to install it in ubuntu
$ sudo apt-get install libqt4-dev
$ sudo apt-get install libboost1.40-all-dev
$ tar zxvf debugger-0.9.15.tgz
$ mv debugger /usr/local/src/
$ cd /usr/local/src/debugger
$ qmake -makefile DEFAULT_PLUGIN_PATH="/usr/lib/edb/"
$ make
$ sudo make INSTALL_ROOT=/usr install

take a look  at this too http://www.boost.org/

1 comment:

  1. he current version is 0.9.18. However, it is not working properly on Ubuntu 12.04 LTS and 12.10

    her what to do

    Step 1 :

    sudo apt-get update
    sudo apt-get install libqt4-dev libboost1.48-all-dev subversion

    Step 2 :

    svn checkout http://edb-debugger.googlecode.com/svn/trunk/ edb-debugger
    cd edb-debugger
    qmake
    make
    sudo make install

    Step 3 :

    To see where is the edb installed to.

    whereis edb

    The following is showing the 64-bit system :

    /bin/edb /lib64/edb

    Go back to the user directory, such as /home/samiux.

    cd /home/samiux
    mkdir .edb

    Step 4 :

    Run the program :

    sudo edb

    Once the program is launched, there is a popup saying that the library files cannot be located. You need to go to the "Directories" at the "Preferences".

    Symbol Directory - /home/samiux/.edb
    Plugin Directory - /lib64/edb/
    Session Directory - /home/samiux/.edb

    That's all! See you.

    ReplyDelete