Тёмный

Live Hacking Demo with SECRET NSA Tools - Disassemble and Decompile with Dave! 

Dave's Garage
Подписаться 822 тыс.
Просмотров 58 тыс.
50% 1

Опубликовано:

 

28 окт 2024

Поделиться:

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист
Посмотреть позже
Комментарии : 142   
@MobCat_
@MobCat_ 3 года назад
And this is why I love this channel. Goes off on a mini tangent about the MZ header. Not because he read about it once, but because he was there and has storys from his time there.
@jonesconrad1
@jonesconrad1 3 года назад
@@jalensanders8511 I'm on it
@_chrisr_
@_chrisr_ 3 года назад
I built a honeypot VM with Windows 10 with Hebrew language pack so that when I got a scam tech support call I let them have at it. They tried to set the PIN to stop me accessing it unless I gave them money -but they couldn't read Hebrew (neither can I) so were stuck and gave up. They wanted me to log into online banking and my credentials wouldn't work. Not entirely surprising as I don't have an account with that bank. I had them on the phone for 1.75 hours before they had enough and hung up.
@DaimlerSleeveValve
@DaimlerSleeveValve 3 года назад
Disassemblers can be quite enlightening. Once wrote one for a mainframe to analyse a new version of the OS. We had our own fork of the code, and I decided to look at what the manufacturers' folk had done with it since. Luckily, the OS was issued in the form of an almost-complete compilation, dumped to tape. GIN was a weird assembler, with its internals documented. You could write code to be executed AT COMPILE TIME; if it lacked a feature, you could add it. I added a disassembler. Global variable names were part of the standard dump, and names local to the module and program labels were also saved by clever coding, enabling patches to be applied at install time. I found a module which had not been referenced, and worked out what mods were needed to make it work - I had been thinking of enhancing our fork to do similar things, and had studied the "interesting" bits of the engineers' documentation. I sent a printout of my working version of the module off to their programmers, WITH ALL THEIR ORIGINAL NAMES INTACT.
@malectric
@malectric Год назад
Disassembling any code gives fascinating insights into programming methodology (including that of compiler writers) and techniques used to generalize language mapping including often necessary baggage such as extensive use of indirect addressing in the Motorola sense. It most recently proved highly useful when I had to hack a disk formatting program for an old machine I built running SWTP Flex O.S. I had to modify a single byte in the program to allow me to use an 80 track FDD (new and boxed) with some high density 5-1/4 inch floppies (also previously unused) but which work as they would have done at the time they were manufactured. The (low-level) format utility only worked with 40 track D.S. disks. I used a utility a colleague wrote back in the day to allow modification and replacement at byte/bit level in a disk file.
@rainbain5474
@rainbain5474 Год назад
I have done a lot with Ghidra. I remember the best use I had with it was that our software for work that used windows platform as one of the components of ground station, needed to be able to change bluetooth and network settings as well as well as a few other functions. Whatever code we had before had broken one windows update so I went in and made an API for the functions we needed and tapped into some windows APIs. I am confident you could peace together a simmilar implementation from Microsoft's documentation but being able to open things blue bluetoothapis in Ghidra and see what it actully checks and does under the surface was a big help. Seeing all the exports, as well as the functions they use and the arguements they pass would leave many shocked on how much a program can really do in windows. My CTO thought most of these options where deeply burryed as a registry hack or some windows pro option. I also made some cool custom networking code that created ad-hoc network across many adapters simultatiniusly. I very much rather do this stuff in linux but its always cool to see windows has functionality for all these things.
@mike8610
@mike8610 3 года назад
I used to work at NSA back in 2007-08. Interesting video.
@programorprogrammed
@programorprogrammed 3 года назад
Steve Gibson, my programming hero! You're pretty cool too Dave.
@williammelvin6371
@williammelvin6371 Год назад
Great Info.... I will be sharing/promoting you as much as I can. Thank You !!
@JohnnyMarauder
@JohnnyMarauder 3 года назад
Not a technical comment, but once again you made me smile and enjoy good memories! Cheers!
@DavesGarage
@DavesGarage 3 года назад
Thanks for the kind words!
@coffeemaddan
@coffeemaddan 3 года назад
Becoming my favorite channel. Thankyou Dave!
@jalensanders8511
@jalensanders8511 3 года назад
I can never thank Cybersolution112 on telegram enough for all he has done for me, recommending him to you all is a way of showing my appreciations to him , you can also Contact him via +13106278867 right now to help you out with all your Crypto recovery , phone hacking, tracking ,spying and unlocking of phones
@TheJanhalsema1
@TheJanhalsema1 3 года назад
I mainly use radare2 for this sort of work, but I must say that the ghidra decompilation output is looking good
@BenjaminSweetnam
@BenjaminSweetnam 3 года назад
Dear Customer, thank you very much for registering WinRAR!
@shoeman256
@shoeman256 3 года назад
I was just working with Ghirda, and then I saw your video!
@jalensanders8511
@jalensanders8511 3 года назад
I can never thank Cybersolution112 on telegram enough for all he has done for me, recommending him to you all is a way of showing my appreciations to him , you can also Contact him via +13106278867 right now to help you out with all your Crypto recovery , phone hacking, tracking ,spying and unlocking of phones
@raveltammeleht6278
@raveltammeleht6278 3 года назад
Great stuff, recently got introduced to this, when I was trying to work with some of my very old and first code, back from 2007. Trying to remember some clever audio stuff that I did back then, but fail to achieve in modern times with C# hmmm.. this might come in handy :) Always do backups. Thats the lesson I learned :D
@abcq1
@abcq1 3 года назад
There's a problem with this Dave guy... When he says "I'm doing it live", he then indeed goes and does it live. Which is why RU-vid must go out there and place a monument of him somewhere. Keep it going honest, Dave, well done.
@DavesGarage
@DavesGarage 3 года назад
And no net! :-)
@dataolle
@dataolle 3 года назад
I think it would be very cool to see you take on some reverse engineering and perhaps binary exploitation CTF challenges.
@FrankAnzalone
@FrankAnzalone 3 года назад
Nice to see Dave having trouble for a change
@DavesGarage
@DavesGarage 3 года назад
Yeah that was a little rough to do live first time! Actually I had walked through it in test, but the window borders go outside the window and then I was lost for a little bit!
@CTLanni
@CTLanni 10 месяцев назад
Your podcasts are fascinating. I only have a HS diploma and a couple of years in Biological Sciences, (Florida Institute of Technology) and yet I taught myself software development by reading manuals and publications starting in 1978. I spent more than 40 years writing mostly engineering software using FORTRAN, VB6 and VBA. Although I'm not even close to you guys who wrote MS-DOS and Windows, I get the gist of what you're explaining. Is there a way I can contact you to show you some algorithms I have developed? They're not complex, i.e. you can read them in 30 minutes, if you're not busy. They're not in code, they're explained in English as to what they do.
@balloney2175
@balloney2175 2 года назад
Dave is all around!
@retabera
@retabera 3 года назад
You can Zoom notepad under View menu and also with keyboard+mouse using CTRL+Scroll Up/Down
@DavesGarage
@DavesGarage 3 года назад
I tried a million times, but the version I have just didn't seem to support it!
@Tsiikki
@Tsiikki 3 года назад
@@DavesGarage 21H1 Version they really changed the menus, even has Bing search xD
@benedictsth
@benedictsth 3 года назад
What would happen if you compile the disassembled code again? Will you get the same code or will it improve / get worse?
@DavesGarage
@DavesGarage 3 года назад
It should stabilize. Once you go source-asm-source, it should produce the same asm at that point!
@NickHermans
@NickHermans 3 года назад
Love this tool, use it at least once per week.
@jalensanders8511
@jalensanders8511 3 года назад
I can never thank Cybersolution112 on telegram enough for all he has done for me, recommending him to you all is a way of showing my appreciations to him , you can also Contact him via +13106278867 right now to help you out with all your Crypto recovery , phone hacking, tracking ,spying and unlocking of phones
@randaldavis8976
@randaldavis8976 3 года назад
bought the No Starch Press book haven't really started yet. But I am excited.
@Futt.Buckerson
@Futt.Buckerson 3 года назад
I love the black hat in this video
@DavesGarage
@DavesGarage 3 года назад
My friends works at SpaceX!
@Futt.Buckerson
@Futt.Buckerson 3 года назад
@@DavesGarage I thought it might have been a cheeky nod to the black/white hat concept, given the theme of the video. But a friend at SpaceX is also pretty neat. 😎
@GrayBlood1331
@GrayBlood1331 3 года назад
So what you happen if you ran a de-compiler on a program written in assembly? I imagine every compiler had "fingerprints" the de-compiler can look for. "ah, this must be a loop with a conditional exit". But in assembly I imagine it is harder for the de-compiler to "see" what the programmer is doing. if you were to do something that the normal compiler can't really to then how crazy is the resulting de-compiled code going to look? Hell, what would happen if you ran the de-compiler on random noise?
@bobertfossilington1857
@bobertfossilington1857 3 года назад
Interesting to hear that you used 3rd party tools like IDA Pro to check your code was sufficiently obfuscated. Did you use any other 3rd party programs like Numega's SoftICE back in the day for low level 95/NT debugging?
@DavesGarage
@DavesGarage 3 года назад
Yes! I completely forgot about SoftICE. We used that in the MS-DOS days but never in Win32, but I did see it occasionally. I think we had so many custom debug extensions that made our debuggers powerful, and those extensions wouldn't work in softice, likely...
@bobertfossilington1857
@bobertfossilington1857 3 года назад
@@DavesGarage I thought you might have had your own debugging solutions :) Did any of those make it out into the wild as windbg extensions or commands? We used SoftICE as our software had a kernel mode driver on NT4 (16 bit driver on Win 9x) and various hooks in user mode. Eventually we discovered remote debugging did the job in user mode with all the niceties of being inside Visual Studio.We also got a machine with the right kind of firewire card that you could break into kernel mode with through windbg on another machine, eliminating the need for it. I think SoftICE was still working up to Windows XP.
@schifoso
@schifoso 2 года назад
WinICE worked fairly well too.
@quantumapprentice8120
@quantumapprentice8120 3 года назад
10:50 wow, 30k to 20k? you have amazing bandwidth, but you can stream 1080p at 6k with reasonable quality, and 4k resolution at about 10k bandwidth from what I'm reading. Love your channel :)
@DavesGarage
@DavesGarage 3 года назад
Well, I just have gigabit cable. It's 1000 down and 40 up, very asymetrical. But I figured it'd be safe to try 30, but either Yahoo couldn't compress it fast enough or I don't really have 40, as it was stuttering... but my compressor on my side said the GPU and CPU weren't loaded, so I don't think it was a source PC issue!
@quantumapprentice8120
@quantumapprentice8120 3 года назад
@@DavesGarage Oh, it was stuttering on your end? I figured you were getting people letting you know it was stuttering on their end, which could be an issue too if their internet or pc can't handle that high a bandwidth. My experience streaming on twitch has taught me to avoid the higher bandwidths, even though they look nicer, partly because others may not be able to handle it. But I haven't tried streaming to youtube yet, so I don't know how well it's handled over here. Hope you figure the problem out :)
@DrakeDaraitis
@DrakeDaraitis 2 года назад
@@quantumapprentice8120 watching this as a not live video shows a number of hitches were a minute or two of content is missing so definitely some missing packet/frames depending.
@Janokins
@Janokins 3 года назад
You've probably already figured it out by now, but it looks to me that the issue at the end is caused by the file not being saved.
@twobob
@twobob 3 года назад
HAH and YOU threw task manager at it. Worth the wait to the end
@retabera
@retabera 3 года назад
Use AdoptOpenJDK 11 instead of Oracle Java, is it fully free and compatible with the Oracle one without the Oracle licensing
@DavesGarage
@DavesGarage 3 года назад
But when I installed, it I got only the JRE, no javac.exe included. There was not JDK included, even though it was so named. Perhaps something has changed with it?
@phillipjfry6
@phillipjfry6 3 года назад
@@DavesGarage You need to grab the java-11-openjdk-devel (RHEL) or openjdk-11-jdk package (Debian) to get the full JDK. I usually just install that one and your package manager will most likely pick up the base (JRE) and headless packages as dependencies.
@remasteredretropcgames3312
@remasteredretropcgames3312 3 года назад
@@DavesGarage The Steam Deck is the third coming. I will bring raytracing and therefore order to the cosmos. With your help we could rule the Galaxy.
@remasteredretropcgames3312
@remasteredretropcgames3312 3 года назад
@@DavesGarage It sucks how convention comes before fascination. Human evolution is overdue for a renaissance of technological widespread curiosity. For science. Even if Darwins preferences are innately geared from cave times. Before the power of modding and therefor dominating the Nintendos of our reality.
@remasteredretropcgames3312
@remasteredretropcgames3312 3 года назад
@@DavesGarage You are far far too amazing a precious human specimen to not be helping me in the long game as my project matures. Im also not off the radar in Gabens Kingdom. Think about how attention getting my personality is, despite the hobbit like size.
@Engr.Faisal
@Engr.Faisal 3 года назад
After watching few videos, I came to know that Dave is a hacker.
@VndNvwYvvSvv
@VndNvwYvvSvv Год назад
Of course, but the question is whether you are using that term correctly
@mbr1056646
@mbr1056646 3 года назад
Isn't that from 9:47 Hydra steps in with the animation?
@xEndless11
@xEndless11 3 года назад
I have begin with Ghidra, before with OllyDbg, Snowman and IDA Pro. Ghidra is the most powerful Disassembler and C Decompiler.
@Impedancenetwork
@Impedancenetwork 2 года назад
You sure about that? It was largely written in Java. IDApro is better.
@pelomojado3535
@pelomojado3535 Год назад
I had never user ida so i wouldnt know, but i saw comments saying ghidra is slow and well, it is, its java...ida is written in c++ i think.. other than that, i dont know why ida would be better
@amciaapple1654
@amciaapple1654 3 года назад
Dave!, have you heard of the Dark Mode? My eyes, my eyes...!
@DavesGarage
@DavesGarage 3 года назад
No, but now that I know... definitely!
@markmayhew7893
@markmayhew7893 Год назад
My copy of Ghidra disassembles, but won't convert it to C/C++. Why not?
@Pizza4eversf
@Pizza4eversf Год назад
I am not a programmer. I just remember some commands in ZX Spectrum 48K and C64. Poke ! Ciao
@Wanderlust073
@Wanderlust073 3 года назад
There is plenty more headroom to increase the audio volume...
@DavesGarage
@DavesGarage 3 года назад
Thanks, I'll bum it a little each time until it starts clipping!
@SplitScreamOFFICIAL
@SplitScreamOFFICIAL 3 года назад
Dave Disappears: the episode
@idk--7443
@idk--7443 3 года назад
You should make notepad. That would be kind of cool.
@Thristle
@Thristle 3 года назад
Heyo, dave. In the couple of last videos your recording audio is wayyy down then before. I need to set my phone volume on max to clearly hear you talk
@DavesGarage
@DavesGarage 3 года назад
Will do! In fact I'm going to increase it until it clips and work back, thanks!
@SintaxErorr
@SintaxErorr 3 года назад
I use binary ninja, really like it
@TheBiggreenpig
@TheBiggreenpig 3 года назад
2:50 Hey, IDA Pro also had a C decompiler.
@TorutheRedFox
@TorutheRedFox 3 года назад
a barely functional one
@he8535
@he8535 3 года назад
Hmmm how much performance can you get if you re wrote Linux but entirely in assembly
@Sibula
@Sibula 3 года назад
You'd probably lose a lot of performance and stability just from the inevitable amount of mistakes
@Raphipod
@Raphipod 3 года назад
Assembly only makes sense if used on hardware and if you really want to squeeze maximum performance out of it. It would be very inefficient to write the core GNU/Linux tools in Assembly for example.
@axolet
@axolet 3 года назад
Operating systems focuses on security, stability and compatibility with different hardware setups. Not necessarily raw performance.
@FeTetra
@FeTetra Год назад
tried to decompile a ps2 game with ghidra but it doesnt have the right mips instruction set and also the app was just really broken on linux
@DAVIDGREGORYKERR
@DAVIDGREGORYKERR 3 года назад
Just wondering would this run better on a system running a 3990x and 2TiB Threadripper Compatible 3600MHZ DDR4 RAM
@DavesGarage
@DavesGarage 3 года назад
It night. Please send me a 3990 to confirm.
@DAVIDGREGORYKERR
@DAVIDGREGORYKERR 3 года назад
3990
@troyfrei2962
@troyfrei2962 3 года назад
Can you Decompile the Ghidra tool?
@610jrod
@610jrod 3 года назад
The source code is on github
@troyfrei2962
@troyfrei2962 3 года назад
@@610jrod i'm sorry, I was asking if Dave would decompile Ghidra tool and see how the NSA made the tool and if there is any insight about the tool.
@Cevans3535
@Cevans3535 3 года назад
@@troyfrei2962 You can literally see how it's made by just looking at their code on GitHub...
@eggmeister6641
@eggmeister6641 3 года назад
@@Cevans3535 its a fucking joke dud
@perwestermark8920
@perwestermark8920 3 года назад
@@eggmeister6641 A number of jokes on the net just aren't jokes...
@adandylife329
@adandylife329 3 года назад
What does this NEW software do?
@EvilestMinion
@EvilestMinion 11 месяцев назад
Can't use openjdk?
@ozknight
@ozknight 3 года назад
Above my level but would you ever consider doing any amiga related videos?
@DavesGarage
@DavesGarage 3 года назад
IntuitionBase = (struct IntuitionBase *)OpenLibrary("intuition.library", 39); Now you go!
@ozknight
@ozknight 3 года назад
@@DavesGarage 🤣
@BGDMusic
@BGDMusic 2 года назад
5:35 you can hear the iphone send text sound there
@defendliberty1289
@defendliberty1289 3 года назад
Anybody knows of any tool that helps with understanding a codebase that iz written in C++? That is, when you are given source code that you are completely unfamiliar with?
@jabiraidan
@jabiraidan Год назад
I know this is 2 years old by now, but hey maybe there is still life. So my question is how would you suggest if you can someone goes about learning "this stuff", I'm pretty sure I'm not stupid but unless I can learn what the rules are I can't make heads or tails of this, seeing as you're wearing a Space-X cap Musk was able to pick the brain of a former NASA engineer for the knowledge he required. Sadly I don't have nearly the same resources, the balls and probably, almost certainly the IQ as Musk. I am however where he left as a child, so I'm probably 30 years behind him, minus the obvious limitations, age being one. I feel I've gone into a tangent...knowledge, where, how?
@meylaul5007
@meylaul5007 3 года назад
Ghidra is only as good as you are, in my case: It is pretty bad.
@pugo7925
@pugo7925 3 года назад
What's the reason for that?
@benlinuxguy
@benlinuxguy 3 года назад
I've also registered Winrar
@ExSpoonman
@ExSpoonman Год назад
Why am I not surprised it was in fucking Java?!?
@rudyardkipling4517
@rudyardkipling4517 3 года назад
Divide by neg 2 the value lower than the limit (byvar4) or (UInt64 max) multiply by (40 - bVar4) -- I know exactly what that line is doing, have no clue why unless in is checking from max value in reverse
@nosuchthing8
@nosuchthing8 Год назад
Not so secret
@MrRobbyvent
@MrRobbyvent 3 года назад
leaked?! This software was already old school when came public..
@DavesGarage
@DavesGarage 3 года назад
You and Julian are close I take it?
@MrRobbyvent
@MrRobbyvent 3 года назад
@@DavesGarage Absolutely not! I don't want cops at my door next day. You're saying it!😬
@remasteredretropcgames3312
@remasteredretropcgames3312 3 года назад
One day my Lord.
@stcstwwlove
@stcstwwlove 3 года назад
Hmmm. Hydra with aG
@mirko7389
@mirko7389 3 года назад
"secret" how ? :P
@DavesGarage
@DavesGarage 3 года назад
Like it was classified by the US gov't. That how. Google it. Enigma was secret too, right?
@steph291
@steph291 2 года назад
lol
@propacollector3499
@propacollector3499 10 месяцев назад
i no guys who hack them pade pople thy stole money of sent yhe info to the cops
@DAVIDGREGORYKERR
@DAVIDGREGORYKERR 3 года назад
I think Microsoft needs to ditch the NTOSkrnl.exe and replace it with Debian, FreeBSD, NetBSD or SUSE un UNIX System V
@DavesGarage
@DavesGarage 3 года назад
Not sure what that would accomplish. It already runs the Linux kernel alongside, so anything it can do, Windows can do. But the opposite isn't true. So Windows wins!
@dotslashsatan
@dotslashsatan 3 года назад
Can’t believe you stole zip code using IDAPro haha
@DavesGarage
@DavesGarage 3 года назад
Um, stop drinking the bong water, Mr. Matata. I bought the zip code from Dynazip. Who stole what from where?
@dotslashsatan
@dotslashsatan 3 года назад
@@DavesGarage I was joking chill ur passion wagon. I missed it during ur rambling why use IDA Pro on winzip? / third party zip tools
@diconicabastion5790
@diconicabastion5790 3 года назад
6:30 min or thereabouts you are trying to figure out what is going on. It isn't an optimization. Its exactly the opposite caused by you. I've explained multiple times that you have an unnecessary loop in your code. This video is just painful to watch it shows how little you are familiar with your own code. In truth you could optimized this further beyond what I linked below. You could have used the bit array to only represent values ending in 1,3,7,9 but you didn't allow that because you wanted 5 included. Had you though you could have skipped all multiples of two of each prime you found and each bite would have held an increment of 20 (1,3,7,9,11,13,17,19). It wouldn't have made a great deal of difference in speed though it would have been effectively substituting a multiplication for a check of a bit.
@DavesGarage
@DavesGarage 3 года назад
So if you're so smart why haven't you submitted a faster version and taken credit for its score? There's no room for whining here Diconica, only code. Put up or shut up, as they say. Write some code or go away.
@BRich057
@BRich057 3 месяца назад
@@DavesGarage Well Said. I mean it is your garage anyway.
@fn0rd-f5o
@fn0rd-f5o 3 года назад
Dave, you have no skill! XD
@rocketscienceinstituteinc8993
Great instructions and insights. I copy/pasted screenshots of this video into Dall-E and ChatGPT AI and right away hacked into the Pee Tapes Vault in the Kremlin. How do I send my private key to Ed Snowed-In?
Далее
How to Crack Software (Reverse Engineering)
16:16
Просмотров 662 тыс.
ДУБАЙСКАЯ ШОКОЛАДКА 🍫
00:55
Просмотров 2,6 млн
На самом деле, все не просто 😂
00:45
I made the same game in Assembly, C and C++
4:20
Просмотров 774 тыс.
The Secret Life of Microsoft Interns - by Davepl
17:03
New Windows Easter Egg Discovered - And I'm in it!
10:23
Tools of NSA playset
22:51
Просмотров 28 тыс.
Hacking a weird TV censoring device
20:59
Просмотров 3,2 млн