Toolsmithing an IDA Bridge
Adam Pridgen and Matt Wollenweber explores toolsmithing an ida bridge at DEF CON 18, examining malware-analysis and practical defenses.
Summary
Architecture and Background
Adam Pridgen & Matt Wollenweber - Toolsmithing an IDA Bridge, Case Study for Building a Reverse Engineering Tool The presentation is a case study about an approach to building reverse engineering tools, but in this case, a network bridge between IDA Pro and Debuggers. The presentation will cover the development side of things, and discuss how to leverage open source projects as supplements for code and learning aids, detail useful sources for this type of development, and provide insight about how to build C++ extensions for WinDbg and IDA, as well as building Python plugins for ImmunityDebugger and VDB. Additionally, tips and techniques for rapid software development and testing will be described to help aid those onesy/twosy development teams.
Vulnerability Analysis
The target audience for this presentation are those interested in tool development. Adam Pridgen is an independent researcher and information security consultant that works on a variety of problems as an attacker and a reverse engineer. Adam began his security career at the University of Texas, where he was a member of the UT Honeynet Project and an IDS tech.
Exploitation and Demonstrations
From there, he has passed through a variety of research and consulting roles. Currently, he is an open source tool developer, researcher, and consultant at The Cover of Night. In the fall, he will begin his PhD at Rice University.
Remediation and Defensive Strategies
Matthew Wollenweber has extensive background as a penetration tester and security researcher. Matthew is a former employee of the NSA where he was a member of the Red Team and later a lead developer of an advanced network sensor program. Matthew is a former senior consultant at Foundstone, a Shmoocon speaker, and active researcher. Currently he is the team lead for malware analysis at The George Washington University and hopes to enter a PhD program shortly. For copies of the slides and additional materials please see the DEF CON 18 Archive here:
Related talks
Main Stage·49 min
Jon McCoy
Jon McCoy explores hacking .net applications: the black arts at DEF CON 19, examining malware-analysis and practical defenses.
Main Stage·43 min
Chaos Computer Club
Chaos Computer Club explores chaosvpn for playing ctfs at DEF CON 18, examining malware-analysis and practical defenses.
Main Stage·49 min
Lineberry · Richardson · and Wyatt
Lineberry and Richardson details anthony Lineberry, David Luke Richardson & Tim Wyatt - These Aren't the Permissions You're Looking For The rise of the robot revolution is among us.