All articles

Interviews, Igor's tips of the week, guides, industry best practices, and more.

The highlighter

Today I’ll present you a pretty small yet useful plugin. If you tried to trace an obfuscated code ...

How to unpack XCP.DAT?

I updated my EFD utility to handle the packed XCP.DAT file. To extract files from the archive, use: ...

Sony DRM

The last week several LGPL violations were found in Sony’s DRM implementation. Here is a proof of ...

The ultimate stealth method

The last described method does not work if the application uses an “unsupported” antidebugging ...

Stealth plugin

The last time I showed you a simple trick with conditional breakpoints. Today I will present you a ...

Simple trick to hide IDA debugger

Quite often IDA users ask for a plugin or feature to hide the debugger from the application. In ...

Several files in one IDB, part 4

Final method of loading several files into a database D. Use Steve’s plugin

TLS callbacks

I promised to tell you about the TLS callbacks. Here is the discussion. When you launch the ...

Several files in one IDB, part 3

The third method to create a database with several PE files. C. Change segment attributes in the ...