I chose files (for the most part) that you had on your site :)
The next stage will be to use colour "more effectively", perhaps introducing information from elsewhere, such as from IDA. It would be neat to see code vs data, for instance maybe. Possibly to hilight different parts of the file on demand.. Lots of possibilities, I suppose.
Very cool work. Have you seen Ospy? Ospy allows you to inject a DLL in a running process and open the process address in IDApro. It would be cool if your app did the same thing!
I haven't used ospy, but from what I have read about it, I don't see quite how it would be terribly useful or interesting? What did you have in mind?
I suppose you could visualise memory, but you wouldn't need ospy for that - and I don't think it would be much different from viewing files straight from disk?
Anyway, it seems quite far beyond the scope of my little project. Of course if you want to hack at it, I published the source, see the link in description :)
With programs that use windows crypto api, ospy can hooks the app before it's encrypted so you can see things in clear text with SSL traffic for example. Its great for malware thats packed.
This stuff is above my head at the moment! There will be no hacking of your source code. :) Thanks for posting it tho!
It's great to be interested in these things. Most importantly if you want to learn anything, fiddle with it. Fiddle lots. Take my source and other people's stuff and change it. Break it. Fix it. Make it do silly things.
For the moment though, I don't see much benefit to what you are suggesting. It would be very complicated to set up in any meaningful way and would provide very little benefit (that I can see).
Haha great work!
I've tried something similar before I've made the 2D version, but my mistake was that I have chosen totally boring files for my experiment ;>
I'm glad you've chosen more interesting ones! They look great!
Great work once again ;>
GynvaelColdwind 2 years ago
Heh, thanks.
I chose files (for the most part) that you had on your site :)
The next stage will be to use colour "more effectively", perhaps introducing information from elsewhere, such as from IDA. It would be neat to see code vs data, for instance maybe. Possibly to hilight different parts of the file on demand.. Lots of possibilities, I suppose.
pgw47 2 years ago
Very cool work. Have you seen Ospy? Ospy allows you to inject a DLL in a running process and open the process address in IDApro. It would be cool if your app did the same thing!
jamaalspeights 2 years ago
I haven't used ospy, but from what I have read about it, I don't see quite how it would be terribly useful or interesting? What did you have in mind?
I suppose you could visualise memory, but you wouldn't need ospy for that - and I don't think it would be much different from viewing files straight from disk?
Anyway, it seems quite far beyond the scope of my little project. Of course if you want to hack at it, I published the source, see the link in description :)
pgw47 2 years ago
With programs that use windows crypto api, ospy can hooks the app before it's encrypted so you can see things in clear text with SSL traffic for example. Its great for malware thats packed.
This stuff is above my head at the moment! There will be no hacking of your source code. :) Thanks for posting it tho!
jamaalspeights 2 years ago
It's great to be interested in these things. Most importantly if you want to learn anything, fiddle with it. Fiddle lots. Take my source and other people's stuff and change it. Break it. Fix it. Make it do silly things.
For the moment though, I don't see much benefit to what you are suggesting. It would be very complicated to set up in any meaningful way and would provide very little benefit (that I can see).
pgw47 2 years ago