Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Introduction to Hacking Thick Clients: Part 4 – The Assemblies

netspi.com | blog | #windows | #reverse-engineering | #binary-analysis | #thick-client | #dotnet | #pesecurity

Summary

Covers assembly protections like ASLR, DEP, SafeSEH, and Authenticode signing, shows how PESecurity flags unsigned binaries, and explains decompiling .NET assemblies to review code.
Published
Collected

original ↗

Related coverage

blog · netspi.com
Introduction to Hacking Thick Clients: Part 6 – The Memory
The final installment of the thick client series covers memory analysis: dumping a process from Task Manager, extracting strings, and why sensitive data should use mutable types that can be wiped.
blog · netspi.com
Introduction to Hacking Thick Clients: Part 5 – The API
Thick client series part five covers API monitoring and invocation: API Monitor logs over 500,000 calls during login, and .NET SmokeTest lets testers load assemblies and run individual methods.
blog · netspi.com
Introducing BetaFast – NetSPI's Vulnerable Thick Client
NetSPI releases BetaFast and Beta Bank, two deliberately vulnerable C# thick clients for practice, with flaws from SQL injection and hardcoded credentials to unencrypted database connections.
blog · netspi.com
Limiting The Exposure of Plain Text Passwords in C#
NetSPI shows why .NET SecureString still leaks passwords in memory via NetworkCredential, and demonstrates safer login handling using pinned mutable byte arrays instead of immutable strings.
blog · netspi.com
Binrev- Automate Reversing Windows Binaries for Pentesters
Binrev chains common tools to automate reversing of Windows .NET, native, and Java binaries using de4dot, JustDecompile, procyon and more, aiding static code review and hardcoded secret hunting.
blog · projectzero.google
Using Binary Diffing to Discover Windows Kernel Memory Disclosure Bugs
A Project Zero post on using binary patch diffing to uncover Windows kernel memory disclosure bugs, including methodology, tooling, and notable findings from this approach.
back