Interesting technique to hide code from IDA Pro before the main function by (ab)using GCC constructors.
More information about how to detect this technique and similar ones here:
The second part of the video is a quick introduction to the GNU Debugger - GDB.
Although there are not that many Linux malware, this technique is definitely something to be aware of.
Tools:
- IDA Pro
- GDB Debugger
- gdbinit
- Vim
References:
gdbinit man page
1 view
487
113
5 months ago 00:24:08 1
Karl Zéro : ce que révèle l’interview exclusive du prisonnier Marc Dutroux !