OneNote Analysis
This article teaches how to analyze OneNote files using the open-source tool pyOneNote and discusses interesting features of OneNote files that are useful for analysts.
GoggleHeadedHacker
Latest posts
Intro to Cutter
This introduction to Cutter goes through and describes the UI elements and tools available via the Cutter interface.
BlackGuard Analysis - Deobfuscation Using Dnlib
.NET binaries are easier to reverse than compiled binaries; however, creating deobfuscators can be a daunting task for new analysts. This post describes creating a .NET deobfuscator from Blackguard Infostealer.
Analysis of Log4jShell Attack
This article gives a technical overview of the Log4jShell vulnerability as well as present findings from data collected from a honeypot.
Reverse Engineering Crypto Functions: AES
This tutorial will show how two methods of implementing the AES algorithm work. It will also demonstrate how to identify these methods in Assembly when reverse engineering an application.
Reverse Engineering Crypto Functions: RC4 and Salsa20
This tutorial will show how RC4 and Salsa20 algorithms work and how they can be identified in assembly when reverse engineering an application.
Sodinokibi Ransomware Analysis
Sodinokibi is a Ransomware-as-a-Service provider that has been covered in the news quite a bit recently. This article takes a deep-dive analysis into the inner workings of how the ransomware operates. It will focus on technical details such as how encryption keys are generated and how files are encrypted.
Anti-Analysis Techniques Used in Excel 4.0 Macros
This article will review how to reverse engineer excel 4.0 macros using a malicious document. It will also describe anti-analysis techniques used by the sample.
Automatic Gobfuscator Deobfuscation with EKANS Ransomware
This article will analyze EKANS Ransomware. It will go over how to reverse engineer a Golang binary and describe the ppular obfuscation tool, Gobfuscate.
Malicious Excel 4.0 Macro Analysis
This article will go over the analysis of a malicious Excel Document.