Viewing profile — 0d0a

Exactly, it misses out on explaining how the fixed Huffman table is interpreted to apply symbol and distance codes, or how dynamic tables are derived from the input itself. Sure it…

Even if it doesn't use block-based compression, if there isn't a huge range of corrupted bytes, corruption offsets are usually identifiable, as you will quickly end up with invalid…

Can you give some examples? When batching data, you benefit from picking something like io_uring. But for two-way communication, you still need to notify either side when data is r…

Nice, I'll give it a closer look. My only concern so far is memory hooking (still needed for hardware registers), which on Java side was called by FilteredMemoryState [1]. In memst…

I think it's closer to the 2A03. Unless I missed something, there isn't any support implemented for binary-coded decimal mode.

Thanks, but I think I'm going to disappoint you: the demo is using pre-recorded manual inputs, which are then replayed when emulating in Ghidra. The only logic involved is checking…

From what I've seen, it's usually read at the vblank interrupt. The input recording has entries in format " ". If I press a button and it's read from the hardware register after le…

Nice to see another CTF enjoyer :) I've always thought about using Ghidra for vm challenges, but I'm still not sure if it fits the typical timeframe. Although I never used it, some…

I've been exploring new ways of testing Ghidra processor modules. In this repo, I was able to emulate NES ROMs in Ghidra to test its 6502 specification, which resulted in finding a…

https://nevesnunes.github.io/blog/ Reverse engineering, debugging, and some silly contraptions.

Oh nice, it wasn't clear from the test suite if that was the case, I'll give it a closer look. Judging from the python scripts, it seems to expect a whole binutils toolchain (so no…

I'm also writing a processor module, and reading this is a bit encouraging to eventually write about it once it's finished. Getting off the ground wasn't the hardest part so far. Y…

> There's a discouragment the comes in the RE community that to be useful at all you need to be able to write your own exotic packer decoders Unless you are talking about obfuscate…

This tool served as a base for a fun project of mine [0], which consisted on injecting arbitrary bytes to a deflate stream without affecting the decompression output. The main idea…