Skip to main content
CPEBuddy
reverse engineering, but math.

reverse engineering, but math.

Source: YouTube · Low Level · published Feb 23, 2024 · 16:55

Malware Analysis
No ratings yet Log in to rate
Transcript Available
Description

The video demonstrates using Anger (a symbolic execution framework) to solve a reverse engineering challenge 0:00. The goal is to find the correct input that makes an ARM binary called "Armageddon" validate successfully 0:45.

Key Takeaways:
• ARM architecture is recommended for beginners due to its reduced instruction set simplicity 1:19
• The binary contains ARM assembly obfuscation with garbage instructions between real operations 4:45
• Anger uses symbolic execution to convert the program constraints into mathematical problems solvable with Z3 7:19
• Manual constraint solving would be extremely difficult, but Anger automates this process 8:07
• The solution involves setting up symbolic input values and constraining them to printable ASCII characters 10:44

The successful flag found was "UMD CTF-arm is so satisfying" after adjusting the solver to account for all constraints 16:28.

Sources:

  • 0:00 Introduction to reverse engineering and crackme challenges
  • 0:45 Introduction to the Armageddon crackme
  • 1:19 Benefits of ARM for learning
  • 4:45 ARM obfuscation technique
  • 7:19 Using Anger for symbolic execution
  • 8:07 How Anger works with constraint solving
  • 10:44 Setting up sym

Generate CPE Credits

Generate a professional CPE document from this video's transcript.

Estimated credit: 0.5 CPE hours

Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.

Topic: Malware Analysis. Commonly maps to: Security Operations, Security Architecture and Engineering. Exact CISSP domains are assigned during generation.

CISSP Domain Mapping
Learning Objectives
Self-Assessment Questions
PDF Export Ready

Free account. One generation at a time, with a daily limit.

CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.

Watch on YouTube

Transcript Preview

First 800 characters of the transcript

reverse engineering is the Dark Art of taking code that somebody else wrote and taking it apart to see what it does it's kind of like a Rubik's Cube actually I'm not really sure how that analogy works out now maybe it's a piece of malware maybe you're trying to figure out what this malicious piece of code on your computer did and by the way also lock bit an international ransomware organization just got rolled up by the FBI God you love to see it or maybe it's simpler than that maybe it's just a puzzle and by taking apart this puzzle you learn something new or kind of neat about Computing these puzzles are called crackme challenges and by solving one typically you make yourself a better programmer by learning a little bit about how computers work at a fundamental level also don't worry abo…