Some news
Piotr Bania (Piotr) <baniapiotrgmailcom> Friday, February 16 2007 05:33.57 CST



The last university semester ended 2 weeks ago (for me, it seems pretty small part of guys was so lucky as i'm). Due to that fact i had something like 2 weeks of vacation. Well its better then no vacation at all :) So i got some time to make some computer things while having a free time.

So first of all, in next few days you should be able to see 3 critical bugs in some of very popular software. And there are some other cool bugs which you will be able to see someday.

Last 3 days, few hours each day, i was working on Aslan (4514N) subroutine mixer module. Its now ready, and shortly it can replace the position of any SUBROUTINE with other SUBROUTINE. This ability is an extended idea which i got some years ago while looking at W32.Ghost virus (i never played with DOS.Badboy but it seems it also uses such features). The order of subroutines sould be different every mutation (its randomized though). This should lead to n! different generations where n is a number of subroutines.

Also i have updated a bit my group swapping and instruction swaping module. Aslan can group some instructions in a group and then swap it with some other block. The same goes with single instructions. Of course the program works perfectly after such manipulation, because this action mostly relies on flag and register dependency (block versus block, instruction versus instruction).

Of course, i'm now going to think more about some meta stuff. So i should get on with it some free day too.

Anyway, you know, just single block mixing is still not enough for Halvar's bindiff :)

Ah and the new semester begins within few days :( <Booooo>

peace!





Comments
Posted: Wednesday, December 31 1969 18:00.00 CST