|
Over the years I have invested heavily in product R&D building a wide
assortment of new skills, and fostering a diverse background and understanding.
These are some of the papers I have developed along my journey that I make freely available to help others along. |
Sandsprite Papers
VB6 P-Code / Reversing
Reverse Engineering / Binary Analysis
Understanding the Import table
Understanding IAT Hooking
Understanding Peb Module Lists
Libemu Shim for Unicorn
Remote Symbol Resolution
Visual Basic 6
- IAT Hooking Example - 2004
This is a quick paper on the age old technique of hooking by way of replacing function addresses in the binaries Import Address Table.
This is a simple, powerful technique which opens up allot of possibilities when you realize the capabilities it gives you.