jeff0falltrades / tutorials

Various Tutorials

Tutorials

Reverse Engineering

• asyncrat_config_parser: AsyncRAT Malware Config Parser in Python (with Video Tutorial)
• hacking_weaponizing_solitaire: Reverse Engineering and Weaponizing XP Solitaire (with Video Tutorial)
• rct_full_res: Roller Coaster Tycoon (1999) Full Resolution Game Patch (with Video Tutorial)
• rct_horror_mod: Roller Coaster Tycoon (1999) Mod and Tutorial on Graphics Manipulation & Shellcode

jeFF0Falltrades master0Fnone Classes

The jeFF0Falltrades master0Fnone Class series is a collection of free, long-form online courses made to make learning topics - like reverse engineering - more accessible (and fun) to everyone.

See the README in this directory for all available classes.

Machine Learning

• simple_transaction_classifier: Simple Bank/Credit Card Transaction Classification Tool

How to Download Individual Project Directories

Oftentimes, you may just want to download one, or only a few, of these Tutorial projects, and not the whole repository.

To do so, you can take advantage of Git's sparse-checkout command, as such:

git clone --no-checkout https://github.com/jeFF0Falltrades/Tutorials.git
cd Tutorials
git sparse-checkout init --cone
git sparse-checkout set master0Fnone_classes/1_x86_Demystified
git pull origin master

In this example, only the code files in master0Fnone_classes/1_x86_Demystified and its subdirectories will be downloaded onto your machine.

If you want to download multiple directories, you must include them all in your set command:

git clone --no-checkout https://github.com/jeFF0Falltrades/Tutorials.git
cd Tutorials
git sparse-checkout init --cone
git sparse-checkout set master0Fnone_classes/1_x86_Demystified asyncrat_config_parser/
git pull origin master

If you omit master0Fnone_classes/1_x86_Demystified from the above after cloning it with sparse-checkout, for example, it will be removed and only asyncrat_config_parser will be present.

tutorials's Issues

Sandbox in a Box Challenge Writeup

Hi jeFF0Falltrades,

I completed your challenge today and wanted to provide my writeup to add to the Wall of Fame under the user garr3ttmj.

Here is the link: https://github.com/garr3ttmjo/Writeups/blob/main/Sandbox%20in%20a%20Box/README.md

Also wanted to say thank you for the time you spent creating your videos and the challenge. This was my first exposure to malware analysis and you provided a great walkthrough in setting up the VMs and your approach to analyzing malware.

Creating a Discord server

Hey jeFF0Falltrades!
Creating a Discord server(or whatever alternative platform) would allow us to communicate with each other, exchange ideas and meet others interested in RE.
What do you think?

Solution tips

Hi, I managed to get the answer but couldn't figure out the input sequence to get the key so I patched one line in the assembly and it worked. However I feel that it was a kind of a cheaty way of solving it. Are you supposed to do something similar or am I still missing something? Not going to go into any specifics in order not spoil the fun for anyone. And the series are awesome btw! Hope to see more content from you.