oalabs
patreon
Live Stream VOD: Tofsee String Decryption Another C++ Win!
🕑 Added 2022-11-28 03:49:09 +0000 UTCIn this twitch stream we take a look at Tofsee a simple spambot written in C++ with a funny string encryption trick. We also discuss some methods for automatically locating string references in assembly.
Samples
96baba74a907890b995f23c7db21568f7bfb5dbf417ed90ca311482b99702b72
Notes
Comments
OALABS
Thanks : )) BTW the reason I don't like to use IDA scripts for stuff like this is these usually get turned into stand-alone config extractors that need to run at scale (no IDA in our automation pipeline). Though I agree 90% of these data extraction scripts I write would be way easier with IDA.
Karsten Hahn
Your streams are awesome to relax, like ASMR. :D
