It is about a minor project that i recently completed. That is writing a virtual machine to slow down the process of reverse engineering. This is not a tutorial to do the same however I have included the presentation that i used during the final presentation, the PDFs for System Design and Sample Runs and one step by step sample run.

#Presentation

#Code

#Sample Run

In this sample run I am going to implement the POC expansion algorithm that was the final program that was written for OIVM.1. Make sure bootrom.txt and OIVM.exe are in the same folder.
2. Open the Bootrom.txt using a Hex Editor (example : Hex Workshop) and write the following hex stream to it.

3F 11 25 00 2F 08 3F 38 3F 38 41 3D 09 1B 3C 4C 21 25 00 2F 14 7C 67 63 55 64 61 38 67 7C 63 38 55 64 61 38 37 41 3D 15 C9 45 3F 11 3F 12 18 68 3C 25 00 2F 08 12 86 C5 38 41 3D 09 00 02 04 06 08

3. Save the file. This is basically in the format of [STUB][Compressed Code]. The stub is 60 Bytes long and extends till the 0x09 in the second line of the hexadecimal stream. The parallel assembly for this code is as follows :

[EXPANSION STUB]
scanf(“%d”,&STACK[SP])
MOV A,STACK[SP]
FLAG=A-ROM[++IP]
JE 8 BYTES
scanf(“%d”,&STACK[SP])
++SP
scanf(“%d”,&STACK[SP])
++SP
–A
JMP -9 BYTES
MOV B,ROM[++IP] //STUB LENGTH
A = fileLen
A=A-B
FLAG=A-ROM[++IP]
JE 14 BYTES
MOV C ,ROM[B]
MOV D,SP
MOV SP,C
MOV C,STACK[SP]
MOV SP,D
MOV STACK[SP],C
++SP
MOV D,SP
MOV C,ROM[B]
MOV SP,C
++SP
MOV C,STACK[SP]
MOV SP,D
MOV STACK[SP],C
++SP
++B
–A
JMP -21 BYTES
ROM=(char *)realloc(ROM,ROM[++IP]) //FILE EXPANDED
scanf(“%d”,&STACK[SP])
MOV A,STACK[SP]
scanf(“%d”,&STACK[SP])
MOV B,STACK[SP]
MOV SP,B
MOV C,ROM[++IP]
FLAG=A-ROM[++IP]
JE 8 BYTES
MOV B,STACK[SP]
MOV ROM[C],B
++C
++SP
–A
JMP -9 BYTES
[COMPRESSED FORM]
00 02 04 06 08

4. Now run the program.If however you dont speak assembly that doesnt matter here is the algorithm for it :

1. Enter the Number of elements in the dictionary.
2. Enter the dictionary.
(Dictionary is stored on the stack)
(The dictionary is looked up for values corresponding to compressed code)
(The new Values are updated over the stack)
3. Enter the New Size.
4. Enter the SP (which could have been hardcoded as well)
(The code expands)
(The execution is now passed on to the expanded program)
5. Enter the first element. Hit Enter.
6. Enter the second element. Hit Enter.
7. The sum is Displayed.
8. OIVM halts.

Results/Output

#Thanks

Special thanks to Mr. Atul Alex Cherian, Ms. Nishtha Jatana and Ms. Kritika Sobti.

1. VAREZ sites.

There are always 100’s of sites that host varez content and by asking in a few forums you would quickly get a link (in previous threads as well) and then you can download them. I used to depend heavily on crshare.com (later wordpressplus.org) this site had the most awesome content… scripts..PSDs…templates you name it and they had it… but sadly now there site’s content has vanished! however the site is still up!

2. Googling

Now this is the part that came handy not just for paid templates but even paid extensions… so how do you get the extensions and templates.. say you need “abc PRO”. just google
“abc pro -site:providersite.com -site:joomla.org”
and this would immediately give you links of latest sites that are hosting the content and would hide the genuine links of the provider and joomla.org (in case of extensions for example you would otherwise see links from extensions.joomla.org)

3. Torrents

This is the easy way however not always successful, see torrents are generally preferred for data that is huge to be hosted otherwise… but in case of joomla… themes and extensions are not really that heavy…  so if you find a torrent..a good one… that would generally be one providing each and every theme of a single provider or a bundle of extensions..

Uptil now googling is what has helped… its so simple and works 80% of the time!

However be careful of what you download and make sure where do you use it. :)

Though I had in my mind that 2 periods! thats long …am I really gonna be able to make it till then..! Allright so this time the presentation in the seminar hall and all my classmates present there! :) The best part is that I knew they were bored like hell… obviously its not of there interest … but they supported me… they were quite and occasionally tried listening as well.. :) Thanks to them for being awesome. :) Now I started with the presentation (this time only I was doing it) and noticed that even my proctor Saba maam was present there… Then it went on ….things worked fine.. one of examples took time hence was not completed on the spot… like you know when your software does not recognize the version of the DBMS on the server… But apart from that it was nice… it went how i had planned… and also i loved the complements … in fact I got the best compliment from my proctor. She said that it was really practical… and generally seminars are not so practical!!! And that pretty much is the motto of my life… to keep things practical. :) Then my classmates’ comments… which actually gave me the right feedback and scope for improvement… Things like i need to take breaks in between, i have to interact more with the audience, include less of backtrack and I could use the zoom tool’s bar feature rather than zooming the entire screen. I would keep that in mind next time :) … and lastly the shocking part was i fucking took the entire too periods!! sorry classmates. :D
Also my offer of sharing the resources for a total of more than 12 types of sql injections is still open if you buy me a coke. :D

But there is one spark of effort that i see in the latest TV show that is “Satyamev Jayate” hosted by amir khan. The show is about such delicate issues and about people who have suffered its consequences.
They released a song named ” o ri chirayia ” that conveys the message that a girl will one day be the support you would look for but by the time you realize this, she has already said her good byes.

O ri chirayia,
Nanhi si chidya
Angana mai phir aja re

O ri chirayia,
Nanhi si chidya
Angana mai phir aja re

Andhiyara hai ghana
Or lahu se sana
Kirno ki tinki
Amber se chunke
Angana mai phir aja re

Humne tujhpe hazaron sitam hai kiye
Humne tujhe jahan bhar k zulm kiye

Humne socha nahi tu jo udd jayegi
Ye zameen tere bin sooni reh jaygi
Kiske dam pe sajega mera angana

O ri chirayia,
Meri chirayia
Angana mai phir aja re

Tere pankho mai sare sitare jadu
Teri chunar dadhak sad rangeen buno
Tere kajal mai mai kali raina bharu
Teri mehndi mai mai kachi dhoop malu
Teri naino sajadu naya sapna

O ri chirayia
Meri chirayia
Angana mai phir aja re

O ri chirayia,
Nanhi si chidya
Angana mai phir aja re

O ri chirayia

Download Link: o ri chirayia.mp3

Now I recently hacked one of my neighbor’s wifi and then scanned the network i found out that he was using a couple of devices… an Iphone(i came to know that it was an iphone during a conversation with my neighbor… as such the OS fingerprints were not detected on nmap.) …some nokia phone and a desktop….the desktop was a windows machine(with the ip 192.168.1.11) …windows xp sp2. But the problem was he had his firewall on … So one day he came online on facebook..so I asked him to switch off his firewall as that can create problems on a computer…and people tend to fall for things like this…so did he. :P

So the very next day I was online on facebook and i saw that he too was online at around 6:30 pm… so i quickly ran the metasploit loaded the exploit and attacked his machine… i did not expect that this would be successful but it was. :D  i had the meterpreter session running in less than a minute….i was in his machine with the power to do anything. :D
And just for fun i promptly sent a message box to his pc saying “You have been hacked”… aaaahhhh :( that was the mistake… this is the reason i am writing this post.. Whenever…mind my words WHENEVER…you hack something…stay silent dude :D ….

When he received this message box he came to know it was me… had a clue atleast(as he told the same later)… i quickly took screenshots of his desktop as is my habit.. then in around less than 5 second my phone was ringing and it was him calling :D Now that made me laugh! i was caught by the obvious proof!. so i had to tell him to switch on his firewall to stay protected.. But had i not sent that message box… and rather installed a telnet server on his computer and maintained a life long access to his pc… that would have been so much better… but aah! you learn from your mistakes… i learned to stay silent.

Now i cannot go into his pc anymore… there were millions of things i could have done…played around in so many ways if i had not made that mistake…. but never mind…mistake done…lesson learned.. :)

The CMS that i use for my forum is phpBB and it has worked pretty well so far. Now, phpBB has organised all users/visitors of the forums in various user groups by default, and one of the default user groups is “bots”. Currently there are 51 bots registered. Now generally forums have a feature that you can see which users are online. And just a day back when I was signed in I saw the name google[bot] as the online user. The first thing i thought was that a user has registered an account with the username google [bot]. I quickly opened up the members list but was surprised that there was no such user. And then the obvious struck me.!!!
It was THE BOT.

So as habit of taking screenshots of the unusual things i see on the internet, I did not miss out on this one.
Here check it out, the purple color name that appears next to my name in the online users section. That’s pretty much entirely how you feel its presence :D.
(you might have to click on it to view it clearly)

Now when I told the same to one of my friends… It was hilarious to learn what they interpreted by my statement “Doooode!, google [bot] visited my forum” What my friend had in my mind was that the cartoon that looked like the logo of android was there on my screen and it was jumping all over the website :D.

Well I know it is a small thing….but somehow this being the first encounter has made this memorable. :)

The next site that i had build was weblare.com, i am a linux hosting reseller so weblare entails only that.

The next place where i started posting about ethical hacking was www.hgunified.com. HGunified.com meant hackers gamers unified, i and my friend mohit bhatia started this website on a 50% share. However we never had extra ordinary number of viewers. Also i started to realize that there are enough text tutorials on the internet so i shall make video tutorials and hence www.youtube.com/hgunified  was born.

We did pretty well there. We are still doing, however a youtube channel is always incomplete without a website hence we would neva shutdown www.hgunified.com, it also has some sentiments attached.

Then now finally i have the adwiteeya.com. Actually i had a deal with myself. The deal was that untill and unless i payback dad for the unlimited reseller i bought i am not going to buy adwiteeya.com….hence the delay.
Now adwiteeya.com has majorly three parts.
adwiteeya.com – The parent site that has the links to my blog, my forum and weblare offcourse. It’ll be like the one professional email id that everyone keeps.

adwiteeya.com/blog – This is the place i would post about hacking, college, my life and general other things that happen.
however this is different from the forum that i will maintain in two ways i am going to post about what i did here but how i did it and the allied discussion would only be there on the forum.
And lastly

adwiteeya.com/board – this is the discussion board the place where i would discuss about information security, linux, hosting, android and stuff that most probably btech wouldnt let me study.

Apart from adwiteeya.com i also have the dino.ascentorz.com this is a personal blog, only my friends here would understand the posts that i make…
So no more confusions now. I know what to post where :P