<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[parker的专栏]]></title><description><![CDATA[call me parker!]]></description><link>https://blog.youkuaiyun.com/autohacker</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; autohacker]]></copyright><item><title><![CDATA[Android 反调试反内存dump总结]]></title><link>https://blog.youkuaiyun.com/autohacker/article/details/51364438</link><guid>https://blog.youkuaiyun.com/autohacker/article/details/51364438</guid><author>autohacker</author><pubDate>Tue, 10 May 2016 16:39:46 +0800</pubDate><description><![CDATA[一切都在代码中：https://github.com/parkerpeng/DroidAnti]]></description><category></category></item><item><title><![CDATA[为beaglebone black编译安装BBBAndroid]]></title><link>https://blog.youkuaiyun.com/autohacker/article/details/50385877</link><guid>https://blog.youkuaiyun.com/autohacker/article/details/50385877</guid><author>autohacker</author><pubDate>Tue, 10 May 2016 09:09:18 +0800</pubDate><description><![CDATA[0x00 下载BBBAndroid源码
我们可以通过csimmonds给我们提供的BBBAndroid manifest清单文件来下载BBBAndroid，他已经为我们准备和配置好了一切，除了android4.4.4的源码，还包括bootloader（采用u-boot）源码，以及版本为3.8的linux内核源码，交叉编译工具链等等，可以通过如下命令来下载。]]></description><category></category></item><item><title><![CDATA[常见linux攻击技术之绕过NX实现栈溢出攻击]]></title><link>https://blog.youkuaiyun.com/autohacker/article/details/51162229</link><guid>https://blog.youkuaiyun.com/autohacker/article/details/51162229</guid><author>autohacker</author><pubDate>Fri, 15 Apr 2016 21:24:39 +0800</pubDate><description><![CDATA[0x00 前言
众所周知，linux下开启了NX的以及windows下开启了DEP的程序堆栈是不可执行的，linux下的程序默认编译时是开启了NX的，故很久以前采用的通过jmp esp或者jmp rsp跳板技术跳转到栈中的shellcode执行的栈溢出攻击方式基本上已经失效。
除了NX，还有ASLR，PIE，CANARY，FORTIFY，RELRO等各类保护手段五花八门，大大的提高了linux]]></description><category></category></item><item><title><![CDATA[(CVE-2016-0728)Linux Keyring refcount 内核提权漏洞]]></title><link>https://blog.youkuaiyun.com/autohacker/article/details/51132215</link><guid>https://blog.youkuaiyun.com/autohacker/article/details/51132215</guid><author>autohacker</author><pubDate>Tue, 12 Apr 2016 12:46:18 +0800</pubDate><description><![CDATA[http://perception-point.io/2016/01/14/analysis-and-exploitation-of-a-linux-kernel-vulnerability-cve-2016-0728/]]></description><category></category></item><item><title><![CDATA[2345手机助手类似于百度的WormHole漏洞]]></title><link>https://blog.youkuaiyun.com/autohacker/article/details/51119642</link><guid>https://blog.youkuaiyun.com/autohacker/article/details/51119642</guid><author>autohacker</author><pubDate>Tue, 12 Apr 2016 12:36:20 +0800</pubDate><description><![CDATA[0x00 前言]]></description><category></category></item><item><title><![CDATA[Commons Collections Java反序列化漏洞利用]]></title><link>https://blog.youkuaiyun.com/autohacker/article/details/51036020</link><guid>https://blog.youkuaiyun.com/autohacker/article/details/51036020</guid><author>autohacker</author><pubDate>Mon, 11 Apr 2016 10:38:55 +0800</pubDate><description><![CDATA[0x00 漏洞原理与成因
 漏洞作者写的技术分析：http://foxglovesecurity.com/2015/11/06/what-do-weblogic-websphere-jboss-jenkins-opennms-and-your-application-have-in-common-this-vulnerability/

腾讯TSRC:  https://security.t]]></description><category></category></item><item><title><![CDATA[福特蒙迪欧 ECM系统进入算法代码]]></title><link>https://blog.youkuaiyun.com/autohacker/article/details/50716964</link><guid>https://blog.youkuaiyun.com/autohacker/article/details/50716964</guid><author>autohacker</author><pubDate>Mon, 22 Feb 2016 15:05:29 +0800</pubDate><description><![CDATA[福特蒙迪欧ecm以及pcm的系统进入算法，过掉系统进入算法我们就可以刷写ecu以及刷里程表等特殊功能了
#10 02
secret_keys = {
        0x726: "3F 9E 78 C5 96",
        0x727: "50 C8 6A 49 F1",
        0x733: "AA BB CC DD EE",
        0x736: "08 30 61]]></description><category></category></item><item><title><![CDATA[通过逆向Anan刷机大师得到集成三星线刷的思路]]></title><link>https://blog.youkuaiyun.com/autohacker/article/details/50716037</link><guid>https://blog.youkuaiyun.com/autohacker/article/details/50716037</guid><author>autohacker</author><pubDate>Mon, 22 Feb 2016 12:59:15 +0800</pubDate><description><![CDATA[0x01发现设备
     一旦有线刷模式的三星手机通过USB连接上PC，三星的USB转COM口驱动ssudmdm.sys就会在注册表
键为\HKEY_LOCAL_MACHINE\HARDWARE\DEVICEMAP\SERIALCOMM增加值项\Device\ssudmdmXXXX,如下图1：



图1
很明显，三星的设备都是\Device\ssudmdm开头，后面的XXXX是由]]></description><category></category></item><item><title><![CDATA[获取华为解锁码的思路]]></title><link>https://blog.youkuaiyun.com/autohacker/article/details/50715639</link><guid>https://blog.youkuaiyun.com/autohacker/article/details/50715639</guid><author>autohacker</author><pubDate>Mon, 22 Feb 2016 12:14:00 +0800</pubDate><description><![CDATA[前言
华为手机在刷入第三方rom需要首先解锁手机，而获取解锁码必须要在华为官网进行，并且有14天限制，这无疑给某些特殊需求的用户和rom定制厂商设置了一个很大难题，也为华为保护自身定制软件提供了有利因素，因此这里给出获取华为解锁码的思路。


方法一   
通过在内置存储卡中dump出nvme分区，搜索WVDEVID关键字获得，这样做的缺陷是手机需要root
255|shell@hwp]]></description><category></category></item><item><title><![CDATA[深圳郎仁科技iobd2利用代码]]></title><link>https://blog.youkuaiyun.com/autohacker/article/details/50715284</link><guid>https://blog.youkuaiyun.com/autohacker/article/details/50715284</guid><author>autohacker</author><pubDate>Mon, 22 Feb 2016 10:42:56 +0800</pubDate><description><![CDATA[前言
iobd2是朗仁科技新推出的可与iphone操作系统配套的面向个人车主的诊断工具，与iphone手机采用wifi无线方式通讯；支持OBDII/EOBD协议；记录数据通过手机客户端软件读取，在车辆行驶状态下实时采集汽车发动机数据，如发动机的转速、点火时间、燃油修正、发动机转速、及时油耗、冷却液温度等，通过对iobd2的芯片代码进行逆向发现除了该盒子除了支持标准OBDII之外，还支持自定义ca]]></description><category></category></item><item><title><![CDATA[宝驾租车审计报告（2014年）]]></title><link>https://blog.youkuaiyun.com/autohacker/article/details/50714912</link><guid>https://blog.youkuaiyun.com/autohacker/article/details/50714912</guid><author>autohacker</author><pubDate>Mon, 22 Feb 2016 10:31:11 +0800</pubDate><description><![CDATA[前言：
前端时间在乌云上爆出宝驾租车存在SQL注入漏洞，早在2014年我就对该系统进行了初步安全审计并提交给了宝驾，想不到2015年都还没有去修复，安全意识令人感动啊。


0x1【风险:中】无需验证可以无限制批量上传图片，恶意攻击者可以制作批量上传工具，从而造成服务器磁盘空间不足导致瘫痪。



详细流程请看如下源码




0x2【风险:高】已知注册用户的手机号，既可]]></description><category></category></item><item><title><![CDATA[一个用于提取内存的IDA脚本]]></title><link>https://blog.youkuaiyun.com/autohacker/article/details/50418428</link><guid>https://blog.youkuaiyun.com/autohacker/article/details/50418428</guid><author>autohacker</author><pubDate>Mon, 28 Dec 2015 13:45:11 +0800</pubDate><description><![CDATA[import struct
start = AskAddr(0x2D590 , "start address:")
print "start address:%08x"%(start)
length = AskLong(0x208 , "length:")
print "length:%d"%(length)
fn = AskStr("c:\\table.dump" ,"save as:" )
w]]></description><category></category></item><item><title><![CDATA[objective-c 逆向资料]]></title><link>https://blog.youkuaiyun.com/autohacker/article/details/49895201</link><guid>https://blog.youkuaiyun.com/autohacker/article/details/49895201</guid><author>autohacker</author><pubDate>Tue, 17 Nov 2015 23:20:28 +0800</pubDate><description><![CDATA[http://chen.do/blog/2013/10/22/reverse-engineering-xcode-with-dtrace/]]></description><category></category></item><item><title><![CDATA[Android Shellcode Telnetd with Parameters]]></title><link>https://blog.youkuaiyun.com/autohacker/article/details/49838391</link><guid>https://blog.youkuaiyun.com/autohacker/article/details/49838391</guid><author>autohacker</author><pubDate>Sat, 14 Nov 2015 20:14:39 +0800</pubDate><description><![CDATA[/* 
Title:  Android/ARM - telnetd with three parameters and an environment variable
Date: 2015-07-31
Tested on: Android Emulator and Samsung Note 10.1 (Android version 4.1.2)
Author: Steven Padilla - ]]></description><category></category></item><item><title><![CDATA[编译和测试android的驱动程序学习笔记]]></title><link>https://blog.youkuaiyun.com/autohacker/article/details/49702109</link><guid>https://blog.youkuaiyun.com/autohacker/article/details/49702109</guid><author>autohacker</author><pubDate>Sat, 07 Nov 2015 16:22:06 +0800</pubDate><description><![CDATA[0x00 前言
    通过这篇文章，我们可以详细的掌握android驱动的编译和测试的知识点，这里采用goldfish内核并且在android模拟器上进行测试。
0x01 准备

    首先我们应该了解怎么样下载和编译android下面的linux内核，推荐一篇文章，写的很详细：http://bbs.pediy.com/showthread.php?t=192746]]></description><category></category></item><item><title><![CDATA[监听itunes（xcode）与iphone之间的通信]]></title><link>https://blog.youkuaiyun.com/autohacker/article/details/49468141</link><guid>https://blog.youkuaiyun.com/autohacker/article/details/49468141</guid><author>autohacker</author><pubDate>Wed, 28 Oct 2015 14:30:19 +0800</pubDate><description><![CDATA[0x01.安装socat
sudo ruby -e "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)"brew install socat
0x02.开始监听
sudo mv /var/run/usbmuxd /var/run/usbmuxxsudo socat -t100 -x]]></description><category></category></item><item><title><![CDATA[windows下各调试器条件断点实例]]></title><link>https://blog.youkuaiyun.com/autohacker/article/details/49076461</link><guid>https://blog.youkuaiyun.com/autohacker/article/details/49076461</guid><author>autohacker</author><pubDate>Mon, 12 Oct 2015 18:59:16 +0800</pubDate><description><![CDATA[0x00 前言
    发现网上很多关于ollydbg和windbg的条件断点的设置是错误的，所以这里总结下。
0x01 字符串条件断点
ollydbg:
unicode字符串：bp kernel32.CreateFileW, [UNICODE [esp+4]]=="C:\\4.txt"  ascii字符串：bp kernel32.CreateFileA, [STRING [esp+4]]]]></description><category></category></item><item><title><![CDATA[Ubuntu 14.04(64位)编译android4.2.2]]></title><link>https://blog.youkuaiyun.com/autohacker/article/details/49049629</link><guid>https://blog.youkuaiyun.com/autohacker/article/details/49049629</guid><author>autohacker</author><pubDate>Sun, 11 Oct 2015 17:37:23 +0800</pubDate><description><![CDATA[0x01.安装jDK
sudo add-apt-repository ppa:webupd8team/java
sudo apt-get update
sudo apt-get install oracle-java6-installer
0x02.安装编译依赖的软件
    sudo apt-get install git-core  
    sudo apt-get install g]]></description><category></category></item><item><title><![CDATA[重放攻击]]></title><link>https://blog.youkuaiyun.com/autohacker/article/details/40152503</link><guid>https://blog.youkuaiyun.com/autohacker/article/details/40152503</guid><author>autohacker</author><pubDate>Thu, 16 Oct 2014 18:13:48 +0800</pubDate><description><![CDATA[http://www.hackrf.net/]]></description><category></category></item><item><title><![CDATA[Hate the VIN, Wanna Change It?]]></title><link>https://blog.youkuaiyun.com/autohacker/article/details/39957869</link><guid>https://blog.youkuaiyun.com/autohacker/article/details/39957869</guid><author>autohacker</author><pubDate>Fri, 10 Oct 2014 10:12:59 +0800</pubDate><description><![CDATA[Good news you can. Well sort of.  The VIN stored in controllers is writable (well maybe).  But in some cases its difficult and some impossible.  So I am hear to give you some tips to make life a littl]]></description><category></category></item></channel></rss>