SecDocs Feed for author Sébastien Doucet

[Video] 64-bit Imports Rebuilding and Unpacking

Thu, 09 Dec 2010 19:33:54 +0100

Authors: Sébastien Doucet
Tags: reverse engineering
Event: SecTor 2010

[Slides] 64-bit Imports Rebuilding and Unpacking

Thu, 09 Dec 2010 19:26:39 +0100

Authors: Sébastien Doucet
Tags: reverse engineering
Event: SecTor 2010

[Video] Milkymist

Thu, 04 Feb 2010 06:04:39 +0100

Authors: Sébastien Doucet
Tags: embedded
Event: Chaos Communication Congress 26th (26C3) 2009
Abstract: An FPGA-based open-hardware video synthesis platform. The project develops a stand-alone device in a small form factor that is capable of rendering MilkDrop-esque visuals effects in real time, with a high level of interaction with many sensors and using live audio and video streams as a base. The flexibility of the FPGA used as a central component enables advanced users to modify the design, and also permits compact integration of many interfaces (Ethernet, OSC, MIDI, DMX512, video inputs), making Milkymist™ a platform of choice for the mobile VJ. But Milkymist™ is more than a visual synthesizer - it is also one of the leading open source system-on-chip designs. It is today the fastest open source system-on-chip capable of running Linux, and it comes with an extensive set of features and graphics accelerators. The IP cores that make up the system-on-chip are entirely written in open source synthesizable Verilog HDL and come with test benches and documentation, which makes Milkymist™ a great library of re-usable logic cores to serve as a base for other open source hardware. Project homepage: http://www.milkymist.org The conference focuses on the technical aspects of the project.

[Slides] Milkymist

Thu, 04 Feb 2010 06:04:38 +0100

[Paper] Milkymist

Thu, 04 Feb 2010 06:04:36 +0100

[Video] 64-bit Imports Rebuilding and Unpacking - Part2

Mon, 20 Apr 2009 23:26:00 +0200

Authors: Sébastien Doucet
Tags: reverse engineering
Event: REcon 2008
Abstract: With 64-bit packers and protectors being released, there is presently a growing need to create new tools to facilitate the manual unpacking process and to make it as trivial as it is now for protected 32-bit executables. I'm proposing two brand-new tools: CHimpREC and CHimpREC-64, allowing the spirit of ImpREC to live on under the best possible compatibility with all the x64 versions of the Windows operating system. This talk is about explaining the inner-workings of coding a 32-bit imports rebuilder and the problems encountered due to the WoW64 environment and Address Space Layout Randomization. Next, is an overview of the differences between the PE and PE32+ formats and their impact on porting CHimpREC to 64-bit. Finally, 2 or 3 short live unpacking sessions with different examples of 64-bit packers and how trivial it has become to deal with them with the help of CHimpREC-64.

[Video] 64-bit Imports Rebuilding and Unpacking - Part1

Mon, 20 Apr 2009 23:23:00 +0200

[Slides] 64-bit Imports Rebuilding and Unpacking

Mon, 20 Apr 2009 01:21:00 +0200