Objdump's linear sweep
While objdump's linear algorithm makes it fast, there are tradeoffs. For example, if we construct a Linux executable, we find we can insert strings into various headers which objdump will, to no surprise, blindly misinterpret.
While objdump's linear algorithm makes it fast, there are tradeoffs. For example, if we construct a Linux executable, we find we can insert strings into various headers which objdump will, to no surprise, blindly misinterpret.
Get out of the habit of using while read as an idiom and instead use xargs to process arguments when you're doing batch compute stuff.
TL;DR: Analysis of malspam potentially targeting an organization. C#/.NET binary using KoiVM, process hollowing, and abusing vulnerable procexp152.sys driver.
Today I learned James Garfield, who once worked as a lawyer, Civil War General, and served as the 20th President of the United States, was math savvy and published a novel Pythagorean theorem proof.[1]
We can take this in smaller pieces. First, we can find the area of the right-angled trapezoid with the following equation:
\[ \text{Area}_{\text{trapezoid}} = \frac{1}{2} \cdot (a + b) \cdot (a + b) = \frac{(a + b)^2}{2} \]We can find the area of each of the two outer triangles with the following:
\[ \text{Area}_{\text{triangle}} = \frac{ab}{2} \]And the area of the inner triangle with:
\[ \text{Area}_{\text{inner triangle}} = \frac{c^2}{2} \]Reducing, we can go to the end, beginning with our substituted and now simplified area equation demonstrated above:
\[ \frac{(a + b)^2}{2} = 2 \cdot \frac{ab}{2} + \frac{c^2}{2} \]Then we expand \( (a + b)^2 \) on the left hand side. And our equation on the right can also be simplified since we're both multiplying and dividing \( ab \) by 2:
\[ \frac{a^2 + 2ab + b^2}{2} = ab + \frac{c^2}{2} \]Multiply both sides by 2 to eliminate denominators:
\[ a^2 + 2ab + b^2 = 2ab + c^2 \]Lastly, subtract \( 2ab \) from both sides:
\[ a^2 + b^2 = c^2 \]Exposure to harsh weather wore my watch band down until eventually breaking. So, I re-strapped my F-91W with a sport-grade band (and spring bars) from a W-216H.
It seems like a lot of the previous software wrappers to interact with archive.today (and archive.is, archive.ph, etc) via the command-line ...