| OpenRCE Site Launch | 2005-06-20 |
Just got back from RECON in Montreal. The trip back was miserable (4 flights spanning over 12 hours due to cancellations etc.) but the con was great. Lots of great speakers including Nicolas Brulez, Andrew Griffiths and spoonm. My talk was well received, RECON was definetely the perfect venue for Process Stalker.
On another note. I finally unveiled my latest pet project, the Open Reverse Code Engineering community site, OpenRCE.org. The site is very usable but has many features still under development. Please share any comments, suggestions, bug reports and especially content with one of the site admins.
| Windows Heap Visualization | 2005-06-01 |
You may have noticed the ghosted 'Heap' option under the 'View' menu in OllyDBG. The feature is available only under Windows 95 based OSes and is supposed to display a list of allocated memory blocks. I've written a plug-in, Olly Heap Vis, to provide this missing functionality and more on all modern Windows OSes such as Windows 2000, XP and 2003.
The Olly Heap Vis plug-in provides heap chunk lists, the ability to search the heap, a quick heap jump and finally visualization capabilities through Graphviz. More information and source code is available in the bundled archive.
I've been accepted to speak about Process Stalking at RECON, a computer security conference being held in Montreal from June 17th through 19th.
Full details and source code for Process Stalking will be released in the coming months.
| RE Tool Updates | 2005-04-05 |
Updates for IDA Sync, IDA pGRAPH and IDA Function Analyzer have been made available today. The IDA plug-ins have all been ported to compile against the 4.8 SDK. Binaries for IDA Pro 4.8 are also included.
I am also releasing OllyDbg Breakpoint Manager, an OllyDbg plug-in written to address some shortcomings of the built-in breakpoint management functionality. The plug-in provides three main functions- breakpoint exporting, breakpoint importing and automatic breakpoint loading. More information, examples and source code are available on the software releases page and bundled archive.
| My BZFlag Cheats | 2005-04-01 |
We started playing a great little multi player game called BZFlag in the office some time ago. It became quickly apparently that I sucked terribly at the game, despite my extensive efforts to shift blame to the fact that I was the only user playing on win32 and had older hardware. While I can't play BZFlag, I can code- and BZFlag is open source. Within a short time I was able to level the playing field. In the spirit of April fools, here are the list of changes I made:
bzflag/RadarRenderer.cxx
- Stealth tanks appear on radar.
- Disabled color-blindess.
common/Flag.cxx
- Color bad flags black.
- Color laser flags red.
- Color guided missiles green.
- Color narrow/burrow flags blue.
- Color shockwave flags yellow.
bzflag/playing.cxx
- Disabled ability for other tanks to cloak on screen.
bzflag/ShotStrategy.cxx
- Reduced laser reload time.
bzflag/LocalPlayer.cxx
- Added 25% chance of a good shot missing me.
- Disabled burrow speed handicap.
- This was detectable so I disabled it.
- Disabled my own shots from killing myself.
common/ShotUpdate.cxx
- Made my shot velocity slightly faster when packing the shot packet.
- This appears to have broken my ability to kill others, so I disabled it.