보안쟁이-회사원의 일상

http://leech.nncedsign.com/re/unpacking/

난 스크립 쟁이~

• Parent Directory
• Unpacking !EP(EXE Pack) v1.2/
• Unpacking 12311134/
• Unpacking AHpack v0.1/
• Unpacking ARM Protector v0.3/
• Unpacking AntiDote v1.4/
• Unpacking AsCrypt v0.1/
• Unpacking AverCryptor v1.0/
• Unpacking Bastards Tools v1.1/
• Unpacking C.I. Crypt v0.2/
• Unpacking CDS SS v1.0 Beta1/
• Unpacking Celsius Crypt v2.1/
• Unpacking CrypToCrC PE Protector v0.9.3/
• Unpacking DalKrypt v1.0/
• Unpacking DotFix NiceProtect v2.2/
• Unpacking EXEEvil v1.0/
• Unpacking G!X Protector v1.2/
• Unpacking GHF Protector/
• Unpacking Gie Protector v0.2/
• Unpacking JDPack v1.01/
• Unpacking KaOs PE-DLL eXecutable Undetecter/
• Unpacking MFKPack/
• Unpacking Minke v1.01/
• Unpacking Mr Undectetable v1.0/
• Unpacking NOmeR1/
• Unpacking NakedPacker v1.0/
• Unpacking Open Source Code Crypter v1.0/
• Unpacking PC Shrinker v0.71/
• Unpacking PEDiminisher v0.1/
• Unpacking Pack v4.0/
• Unpacking Pestil v1.0 (1)/
• Unpacking Pestil v1.0 (2)/
• Unpacking Petite v2.3/
• Unpacking Pohernah v1.0/
• Unpacking PolyENE v0.01/
• Unpacking QrYPt0r/
• Unpacking RCryptor v2.0/
• Unpacking RPolyCrypt v1.4/
• Unpacking ReCrypt v0.80/
• Unpacking Russian Cryptor v1.0/
• Unpacking SPLayer v0.08/
• Unpacking Sexe Crypter v1.1/
• Unpacking Shrinkwrap v1.4/
• Unpacking Sopelka v1.5/
• Unpacking Ste@lth PE v1.01/
• Unpacking The Best Cryptor/
• Unpacking Tubby Crypt v1.1.0/
• Unpacking UPX$hit v0.0.1/
• Unpacking UnderGround Crypter v1.0/
• Unpacking VCrpyt 0.9b/
• Unpacking WinKrypt v1.0/
• Unpacking WindofCrypt v1.0/
• Unpacking XCR v0.13/
• Unpacking YZPack 1.1 & 2.0/
• Unpacking fEaRz Crypter v1.0/
• Unpacking nPack v1.1.300/
• Unpacking uPolyX v0.04/
• Unpacking unkOwn Crypter v1.0/
• Unpacking.CrypToCrackPeProtector.v0.9.3.[TallfaZ].pdf
• Unpacking.DotFix.NiceProtect.v2.2.[TallfaZ].pdf
• Unpacking.Drony.Protect.v3.0.and.Luck007.v2.7.[ColdFever].pdf
• Unpacking.MoleBox.Pro.2.6.0.2375.[ColdFever].pdf
• Unpacking.MoleBox.v2.6.[Extracting Embedded Files].[ColdFeve.pdf
• Unpacking.YZPack.v1.1.[TallfaZ].pdf

http://www.exploit-db.com/download_pdf/15726

혹시 몰라서 파일도 Save~

내가 하는 방식과는 다른 독특한(?) 방식..

내가 독특한건가 -_-ㅋ

자꾸 까먹어서 기록용으로 남겨 놓음..

http://www.pentestit.com/2010/03/07/pentestitcoms-wapt-firefox-addons/

펌 : http://viaforensics.com/education/white-papers/iphone-forensics/

Independent Research and Reviews of iPhone Forensic Tools

This white paper is intended for forensic analysts, corporations and consumers who want to understand what personal information is stored on the iPhone and how to recover it. The research reveals the vast amount of personal information stored on Apple’s iPhone and reviews techniques and software for retrieving this information. For questions about our research or our services, please contact us.

Note: viaForensics is independent and is not compensated in any way by the makers of the software reviewed in this white paper.

1. About this white paper
2. iPhone Forensics Overview and Techniques
3. Cellebrite UFED
4. FTS iXAM
5. Oxygen Forensic Suite 2010 PRO
6. Micro Systemation XRY
7. Lantern
8. MacLock Pick
9. Black Bag Technology Mobilyze
10. Zdziarski Technique
11. Paraben Device Seizure
12. Mobile Sync Browser
13. CellDEK
14. EnCase Neutrino
15. iPhone Analyzer
16. Overall Rankings
17. Report Conclusions

Milla 사이트에 갔다가 얻어걸린 URL들..
쌩유..
니들은 내가 냠냠 해줄께..
나도 집에다가 악성코드 수집 서버나 한대 돌릴까.. =_=;;

그리고 이 글 하단부에 있던 악성코드 검색엔진..
구글에서는 커스터마이징해서 검색할 수 있겠금 해놨더군요..
신기한 구글신님..
그리고 그 구글신을 이용하여 만든 검색 엔진(?)
http://www.google.com/cse/home?cx=011750002002865445766:pc60zx1rliu


친절한 Milla 씨는 무슨일을 하기에 이런 지식들을 공유해주고 하는지.. 대략 궁금..

======================================================================================



Here are good resources, links, download locations for malware. Use caution.

• http://forums.malwarebytes.org newest malware threats
• http://forums.malwarebytes.org newest rogue threats
• http://www.kernelmode.info malware section. Registration required
• http://tuts4you.com/download.php?list.89 
• contagiodump.blogspot.com - email milaparkour () gmail for password scheme  

This link is from Lenny Zeltser's Malware Sample Sources for Researchers. The original post is here

• Free Online Tools for Looking Up Potentially Malicious Websites

In addtion, there is a full list collected and published at kernelmode.info (many thanks to Evilcry, Jaxryley, markusg, EP_X0FF, Meriadoc, CloneRanger, Brookit and gigaz)  The original list is here

• http://www.malwaredomainlist.com/mdl.php
• http://support.clean-mx.de/clean-mx/viruses.php
• http://malc0de.com/database/
• http://lineage.paix.jp/guide/security/virus-lastmodified.html
• https://zeustracker.abuse.ch/monitor.php?browse=binaries
• https://spyeyetracker.abuse.ch/monitor.php?browse=binaries
• http://www.sacour.cn/showmal.asp?month=8year=2010
• http://www3.malekal.com/exploit.txt
• http://blog.urlvoid.com/new-list-of-dangerous-websites-to-avoid
• http://www.freepcsecurity.co.uk
• http://www.scumware.org
• http://secuboxlabs.fr
• http://www.threatlog.com
• NovCon Twitter EXE Parsing  provides links to live sites; may include benign files
   
  read more...
• http://amada.abuse.ch/recent.php
• http://jsunpack.jeek.org/dec/go?list=search&search=executable& (RSS feed)
• http://honeywhales.com/malware_samples/list (Japanese)
• http://blackip.ustc.edu.cn/bytime.html (Chinese)
• http://www.malwareint.com (various links in top bar)
• http://www.blade-defender.org/eval-lab (may not always be working - is auto-generated)
• http://www.malwareurl.com/ (free registration required)
• http://www.offensivecomputing.net/ (malware repository, free registration required to download)
• http://mdl.paretologic.com/index.php (registration required, including personal information)
• http://frame4.net (requires paid registration)
• http://vxvault.siri-urz.net/ViriList.php (password required, unknown at present)

These links were kindly provided by Gunther (thank you)

• http://www.malwaregroup.com/Domains/malicious
• Collection of working (live) browser exploits (malware)
• http://www.malwaredomains.com/
• http://www.malware.com.br/lists.shtml
• http://www.nothink.org
• http://malwaredatabase.net/blog/
  You can find some reports by user(s) here as well:
• http://code.google.com/p/google-safe-browsing/updates/list
• http://eureka.cyber-ta.org/ An Automated Malware Binary Analysis Service - can download unpacked binaries

•  Malware Analysis Search Compiled by Alexander Hanel. It searches about 85 different AV, malware analysis and RE blogs (thank you) 

contagiodump.blogspot.com

http://blogs.sans.org/computer-forensics/2010/09/29/hex-editors-for-malware-analysis/


1. FileInsight
2. Hex Editor Neo
3. FlexHex
4. 010 Editor
5. Hiew
6. Radare

http://blog.mtian.net/mdecoder/

9월 18일.. 중국 해커그룹인 중국홍객연맹에서 일본을 상대로 사이버테러를 계획중인 것으로 알려지고 있다..

현재 네이버 및 바이두에서 18일로 검색하기만 해도 수 많은 글을 볼 수 있다.

해당 중국홍객 홈페이지에 들어가게되면 여러가지 반응들을 볼 수 있지만 대부분이

공격에 참여하겠다. 우리땅을 지키자 라는 내용들입니다.

9월 18일.. 토요일인데.. 참 암울한 날이겠네요.. 일본 보안회사 분들은.................. oTL..


http://cnhonker.cc/read.php?tid=8388

Google Groups - Mobile Malware

모바일쪽에 관심이 있어서 보고 있는데
괜찮은것 같아서 이렇게 소개 합니다.

생긴지는 얼마 안되었으며..
제가 가입했을때는 50명 정도였는데.. 3일만에 2배에 해당되는 분들이 가입되어있네요.

현 모바일 악성코드에 대해서 요정도의 정보를 제공하는 곳은 없을꺼 같습니다.
한번 정도 둘러보세요.

http://groups.google.com/group/mobilemalware