Exetools  

Go Back   Exetools > General > General Discussion

Notices

 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
  #1  
Old 01-08-2005, 17:17
LAVA
 
Posts: n/a
Post An Introduction to Software Reverse Engineering

I've worked hard about 1.5 years writing a complete book about Software Reverse Engineering. by now about 75% of the book is done(about 650 pages). the following list is a brief Table of Contents. Any Comments, Suggestions,Corrections about the topics and book structure is
welcome. I'll be very pleased if you send me your ideas about it.
(Bold topics had done by now)

An Introduction to Software Reverse Engineering

Chapter 1 (Introduction)
___.What is reverse engineering
______.Reversing samples in other fields
___.Conditions (Who, What And Why)
___.Some Usages (Legal and Illegal)

Chapter 2 (Analysis)
___.Introduction
___.Compilation Process
___.Execuatable files properties(Different Compilers)
___.Static Analysis
______.Detemining the compiler
______.Import Table Analysis
______.Resources
______.PE structure Analysis
___.Dynamic Analysis
______.Analysing Process properties
______.Modules
______.Threads
______.Process Memory
______.Handles
______.Tracking File activities
______.Tracking Registry activities
______.Tracking Hardware ports activities
______.Tracking Network activities
_________.Introduction
_________.Network Connections
_________.Sniffing
_________.Packet Sniffers
______.Tracking API functions.
_________.API Spying techniques
_________.Reporting
_________.Parameters modification
_________.System wide API hooking

Chapter 3 (Decompiling)
___.Disassemblers
___.Code Analysers
___.Reading Disassembled Codes
______.Introduction
______.High level compiling structures
_________.Loops
_________.Cases
_________.Functions
_________.Objects
_________.Variables
______.Decompilation
_________.Introduction
_________.Usages
_________.Decompilers
____________.VB
____________.Delphi/CBuilder
____________.JAVA
____________.C/C++
____________.Foxpro

Chapter 4 (Debugging)
___.Introduction
___.Debugging concepts
___.How to start
___.User Mode Debuggers
______.Complete OllyDBG tUtorial
___.Kernel Mode Debuggers
______.Complete SoftICE tUtorial


Chapter 5 (Modifications)
___.Resource Modifications
______.VC++
______.VB
______.Delphi/CBuilder
___.PE Strucrures Modifications
___.Code Modification techniques
______.Static
_________.Changing Opcodes
_________.Using caves
_________.Adding sections
______.Runtime
_________.DLL/Code injection
_________.Process Memory patching
_________.API redirection

Chapter 6 (Extracting & Using Executable Codes)
___.Using code injection techniques
___.Function analysiz
______.Dependency Analysis
______.Jumps and Calls
___.Making the output
______.Attaching extracted codes
______.Static Linking
___.Adding sections

Chapter 7 (How to protect)
___.Introduction
___.How to make reverse engineering harder
___.Packing

Chapter 8 (Manual Unpacking)
___.Introduction
___.Memory Dumping
___.User mode
___.Ring 0
___.Finding EIP
___.Recovering Import/Export Tables
___.Samples

Chapter 9 (Uncovering Undocumented functions)
Chapter 10 (.NET Reverse Engineering)

Chapter 11 (Some real world samples)
Appendix 1 (Programming with Win32 ASM)
Appendix 2 (Windows NT Kernel Mode Programming)

Last edited by LAVA; 01-08-2005 at 21:16.
Reply With Quote
 


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 14:35.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( Since 1998 )