<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Philosophically Secure &#187; reversing</title>
	<atom:link href="http://eugk.net/wordpress/category/reversing/feed/" rel="self" type="application/rss+xml" />
	<link>http://eugk.net/wordpress</link>
	<description>Eugene Kogan&#039;s blog on information security and software engineering</description>
	<lastBuildDate>Thu, 12 Aug 2010 20:58:19 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
		<item>
		<title>Automated Web-Based Malware Behavior Analysis</title>
		<link>http://eugk.net/wordpress/2008/10/21/automated-web-based-malware-behavior-analysis/</link>
		<comments>http://eugk.net/wordpress/2008/10/21/automated-web-based-malware-behavior-analysis/#comments</comments>
		<pubDate>Wed, 22 Oct 2008 00:10:12 +0000</pubDate>
		<dc:creator>eugenekogan</dc:creator>
				<category><![CDATA[reversing]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[virtualization]]></category>

		<guid isPermaLink="false">http://eugk.net/wordpress/?p=166</guid>
		<description><![CDATA[I just watched a video presentation from September&#8217;s OWASP conference. The presenter, Tyler Hudak, talked about the Truman-based hybrid sandnet he created to automate the analysis of web-based malware. He references Google&#8217;s The Ghost in the Browser paper, as well as the Honeynet Project. One tool he used to help automate things in Windows is [...]]]></description>
		<wfw:commentRss>http://eugk.net/wordpress/2008/10/21/automated-web-based-malware-behavior-analysis/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Malicious CHM file targets PGP</title>
		<link>http://eugk.net/wordpress/2008/03/27/malicious-chm-file-targets-pgp/</link>
		<comments>http://eugk.net/wordpress/2008/03/27/malicious-chm-file-targets-pgp/#comments</comments>
		<pubDate>Fri, 28 Mar 2008 00:45:16 +0000</pubDate>
		<dc:creator>eugenekogan</dc:creator>
				<category><![CDATA[hacking]]></category>
		<category><![CDATA[reversing]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://eugk.net/wordpress/2008/03/27/malicious-chm-file-targets-pgp/</guid>
		<description><![CDATA[Let&#8217;s not forget that CHM files can be dangerous. They can contain embedded executables that get launched automatically when you open them. This post on SANS ISC details a particular malicious CHM file that was sent out via email. After some investigation, it was determined that the program it ran specifically targeted PGP keyrings. The [...]]]></description>
		<wfw:commentRss>http://eugk.net/wordpress/2008/03/27/malicious-chm-file-targets-pgp/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>G-Archiver is evil</title>
		<link>http://eugk.net/wordpress/2008/03/12/g-archiver-is-evil/</link>
		<comments>http://eugk.net/wordpress/2008/03/12/g-archiver-is-evil/#comments</comments>
		<pubDate>Wed, 12 Mar 2008 23:12:36 +0000</pubDate>
		<dc:creator>eugenekogan</dc:creator>
				<category><![CDATA[google]]></category>
		<category><![CDATA[reversing]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://eugk.net/wordpress/2008/03/12/g-archiver-is-evil/</guid>
		<description><![CDATA[This is a great lesson in why not to blindly trust random software that you find on the Internet. G-Archiver, a program created to help users locally save their Gmail messages, has a piece of code in it that sends your Gmail login and password to the author. You can see a scary screen shot [...]]]></description>
		<wfw:commentRss>http://eugk.net/wordpress/2008/03/12/g-archiver-is-evil/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>JavaScript Packers</title>
		<link>http://eugk.net/wordpress/2008/01/28/javascript-packers/</link>
		<comments>http://eugk.net/wordpress/2008/01/28/javascript-packers/#comments</comments>
		<pubDate>Tue, 29 Jan 2008 01:08:54 +0000</pubDate>
		<dc:creator>eugenekogan</dc:creator>
				<category><![CDATA[development]]></category>
		<category><![CDATA[reversing]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://eugk.net/wordpress/2008/01/28/javascript-packers/</guid>
		<description><![CDATA[This article by SecureWorks, titled &#8220;The Packer 2.0 Threat&#8221;, is a good introduction to and overview of some of the most popular JavaScript packers. It discusses both the legitimate (although possibly misguided) uses of packers, as well as their role in obfuscating malware. The packers mentioned in the article include: Dojo ShrinkSafe, MOOtools, YUI Compressor, [...]]]></description>
		<wfw:commentRss>http://eugk.net/wordpress/2008/01/28/javascript-packers/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Software Reverse Engineering Tool Library</title>
		<link>http://eugk.net/wordpress/2008/01/02/collaborative-rce-tool-library/</link>
		<comments>http://eugk.net/wordpress/2008/01/02/collaborative-rce-tool-library/#comments</comments>
		<pubDate>Thu, 03 Jan 2008 00:40:51 +0000</pubDate>
		<dc:creator>eugenekogan</dc:creator>
				<category><![CDATA[forensics]]></category>
		<category><![CDATA[reversing]]></category>

		<guid isPermaLink="false">http://eugenekogan.net/wordpress/2008/01/02/collaborative-rce-tool-library/</guid>
		<description><![CDATA[This is pretty cool. It&#8217;s the new Collaborative RCE Tool Library, a nearly comprehensive directory of reverse engineering tools. Not only does it list the tools and provide links to download them, the directory also has pretty good descriptions and resources to learn more about each topic. The tools are conveniently sorted by target type [...]]]></description>
		<wfw:commentRss>http://eugk.net/wordpress/2008/01/02/collaborative-rce-tool-library/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
	</channel>
</rss>
