<?xml version="1.0" encoding="UTF-8"?> <rss
version="2.0"
xmlns:content="http://purl.org/rss/1.0/modules/content/"
xmlns:wfw="http://wellformedweb.org/CommentAPI/"
xmlns:dc="http://purl.org/dc/elements/1.1/"
xmlns:atom="http://www.w3.org/2005/Atom"
xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
> <channel><title>Sven Welzel - blog.sven.co.za - www.svenwelzel.com &#187; ida</title> <atom:link href="http://blog.sven.co.za/tag/ida/feed/" rel="self" type="application/rss+xml" /><link>http://blog.sven.co.za</link> <description>The Blog of Sven Welzel</description> <lastBuildDate>Mon, 22 Aug 2011 09:13:45 +0000</lastBuildDate> <language>en</language> <sy:updatePeriod>hourly</sy:updatePeriod> <sy:updateFrequency>1</sy:updateFrequency> <generator>http://wordpress.org/?v=3.2.1</generator> <item><title>Step-by-step virus disassembly</title><link>http://blog.sven.co.za/2010/03/30/step-by-step-virus-disassembly/</link> <comments>http://blog.sven.co.za/2010/03/30/step-by-step-virus-disassembly/#comments</comments> <pubDate>Tue, 30 Mar 2010 06:43:49 +0000</pubDate> <dc:creator>Sven Welzel</dc:creator> <category><![CDATA[code]]></category> <category><![CDATA[security]]></category> <category><![CDATA[synch.cc]]></category> <category><![CDATA[sysadmin]]></category> <category><![CDATA[disassembly]]></category> <category><![CDATA[enegizer trojan]]></category> <category><![CDATA[ida]]></category> <category><![CDATA[virus]]></category> <guid
isPermaLink="false">http://blog.sven.co.za/?p=594</guid> <description><![CDATA[Over at SkullSecurity they&#8217;ve done a great job of a step-by-step disassembly of the Energizer Trojan using IDA. Using a sterile/insight environment, they go through the code to give you an insight into the workings of &#8220;obfuscation&#8221; (or lack thereof), backdoor management (on port 7777) and more. Good beginner&#8217;s intro with pretty pictures]]></description> <wfw:commentRss>http://blog.sven.co.za/2010/03/30/step-by-step-virus-disassembly/feed/</wfw:commentRss> <slash:comments>0</slash:comments> </item> </channel> </rss>
