課程資料
課程簡介
Learn how software protection works from the inside out using the x64dbg debugger
If you had always wanted to learn how software protection works and how to use x64dbg to unpack them, then this is the course for you. This course is an introduction to Software Protection for anyone who wants to get started in this field. It is suitable for software developers who want to learn how to protect their software and also for reverse engineers who want to fix bugs where the source code is not available.
You will learn how to use x64dbg to unpack Crackmes protected with packing and anti-debugging. A CrackMe is a small program designed to test a programmer's reverse engineering skills.
What you will learn
How to set hardware breakpoints and analyze the unpacking header stub
Dumping unpacked executable from memory
Fixing Import Address Tables (IAT) after dumping memory.
Modify program behaviour
Patching programs
Creating loaders for process patching
What if the program cannot be unpacked
3 techniques to unpack multiple protections
Prerequisites:
Before taking this course, you should already be familiar with how to use x64dbg.
Money back guarantee:
This course is backed by a 30-day money back guarantee. So, go ahead and enroll in this course now and start reverse engineering and debugging programs the fun and easy way!
課程章節
- 19 個章節
- 19 堂課
- 第 1 章 Introduction
- 第 2 章 Introduction to Software Protection
- 第 3 章 Downloading CrackMe 11
- 第 4 章 Examining the packer protection
- 第 5 章 Unpacking the packed program
- 第 6 章 Patching the dumped file
- 第 7 章 Introduction to Loaders
- 第 8 章 Creating a Loader
- 第 9 章 Introduction to Anti-Debugging Protection
- 第 10 章 Downloading CrackMe 12
- 第 11 章 Patching Anti-Debugging API calls
- 第 12 章 Installing the Scylla Hide plugin for anti-anti-debugging
- 第 13 章 Using ScyllaHide to hide the debugger
- 第 14 章 Introduction to multiple software protection
- 第 15 章 3 ways to reverse engineer multiple protections
- 第 16 章 Technique #1: Hiding debugger and using loader for process patching
- 第 17 章 Technique #2: Hiding debugger, unpack then patch
- 第 18 章 Technique #3: Hiding debugger, then do Serial Phising
- 第 19 章 Resources for Further Study
課程內容
- How to unpack programs, Bypass anti-debuggers, Patch programs, Dump memory to files, Use x64dbg debugger, Use ScyllaHide plugin, 3 ways to unpack layered protections, What if the program cannot be unpacked, Using loaders for process patching, and more....
此課程所涵蓋的技能
評價
-
DDavid fernando giannoni
marvelous teacher!
-
NNick Nicolaou
Overall a very good course. A bit outdated at a few points, but the concepts are well explained and there are many practical examples. I would definitely call this course an eye opener for those getting started at reverse engineering.
-
DDominik Maślak
very, very important and useful content
-
SStuart Gentry
I would like to send a full review to Paul Chin for his permission to publish. Overall, good course. Paul used some tools to make things easier. I would like to know what the tools are looking for in the executable file. It is one thing to use a tool; it is another to understand what it was built for.