![]() |
|
#1
|
|||
|
|||
|
I've worked hard about 1.5 years writing a complete book about Software Reverse Engineering. by now about 75% of the book is done(about 650 pages). the following list is a brief Table of Contents. Any Comments, Suggestions,Corrections about the topics and book structure is
welcome. I'll be very pleased if you send me your ideas about it. (Bold topics had done by now) An Introduction to Software Reverse Engineering Chapter 1 (Introduction) ___.What is reverse engineering ______.Reversing samples in other fields ___.Conditions (Who, What And Why) ___.Some Usages (Legal and Illegal) Chapter 2 (Analysis) ___.Introduction ___.Compilation Process ___.Execuatable files properties(Different Compilers) ___.Static Analysis ______.Detemining the compiler ______.Import Table Analysis ______.Resources ______.PE structure Analysis ___.Dynamic Analysis ______.Analysing Process properties ______.Modules ______.Threads ______.Process Memory ______.Handles ______.Tracking File activities ______.Tracking Registry activities ______.Tracking Hardware ports activities ______.Tracking Network activities _________.Introduction _________.Network Connections _________.Sniffing _________.Packet Sniffers ______.Tracking API functions. _________.API Spying techniques _________.Reporting _________.Parameters modification _________.System wide API hooking Chapter 3 (Decompiling) ___.Disassemblers ___.Code Analysers ___.Reading Disassembled Codes ______.Introduction ______.High level compiling structures _________.Loops _________.Cases _________.Functions _________.Objects _________.Variables ______.Decompilation _________.Introduction _________.Usages _________.Decompilers ____________.VB ____________.Delphi/CBuilder ____________.JAVA ____________.C/C++ ____________.Foxpro Chapter 4 (Debugging) ___.Introduction ___.Debugging concepts ___.How to start ___.User Mode Debuggers ______.Complete OllyDBG tUtorial ___.Kernel Mode Debuggers ______.Complete SoftICE tUtorial Chapter 5 (Modifications) ___.Resource Modifications ______.VC++ ______.VB ______.Delphi/CBuilder ___.PE Strucrures Modifications ___.Code Modification techniques ______.Static _________.Changing Opcodes _________.Using caves _________.Adding sections ______.Runtime _________.DLL/Code injection _________.Process Memory patching _________.API redirection Chapter 6 (Extracting & Using Executable Codes) ___.Using code injection techniques ___.Function analysiz ______.Dependency Analysis ______.Jumps and Calls ___.Making the output ______.Attaching extracted codes ______.Static Linking ___.Adding sections Chapter 7 (How to protect) ___.Introduction ___.How to make reverse engineering harder ___.Packing Chapter 8 (Manual Unpacking) ___.Introduction ___.Memory Dumping ___.User mode ___.Ring 0 ___.Finding EIP ___.Recovering Import/Export Tables ___.Samples Chapter 9 (Uncovering Undocumented functions) Chapter 10 (.NET Reverse Engineering) Chapter 11 (Some real world samples) Appendix 1 (Programming with Win32 ASM) Appendix 2 (Windows NT Kernel Mode Programming) Last edited by LAVA; 01-08-2005 at 21:16. |
|
|