Writing and Removing LLVM Bogus Control Flow
Writing and removing LLVM bogus control flow, showing how the pass inserts junk blocks and opaque predicates, then how to strip them back out, and the mechanism explained clearly.
Tag: ida-pro
IDA Debugger Hooks: Automating Breakpoints, Registers, and Memory
IDA debugger hooks, automating breakpoints, register reads, and memory access from IDAPython scripts to speed up dynamic analysis work, and the bypass logic broken down.
Reversing a Native Request-Signature Algorithm: SSL Pinning, OkHttp Interceptors, and MD5
Reversing a native request-signature algorithm, tracing a JNI signing routine down to its native implementation to recover the scheme, with the algorithm recovered in detail.