Cisco IOS and StrongSWAN IPSEC VPN

In this blog post we will cover IPSEC tunnel between Linux StrongSWAN and Cisco IOS.

The strongSWAN config file can copied exactly as is to another server with the IP of Cisco Router and the tunnel will be connected between two linux routers…

Getting started with Python and Qt for cross-platform GUI apps

Hi everyone, in this blog post I want to explain how to start developing desktop applications using Qt and Python. We will use PyQt5 module in order to connect Qt with Python. Qt was originally designed for use with C++…

How to get every details about SSDT , GDT , IDT in a blink of an eye

In a few days ago I was looking for something to show me the SSDT and GDT (Which is really important in malware analyzing because most of rootkits are interested in hooking and changing this stuffs.)

Introduction to systemd : Basic Usage and Concepts

Hi everyone

In this post I am going to explain some essential systemd commands and concepts. As systemd popularity grew much more and changed the linux ecosystem drastically, every sysadmin, DevOps or every casual…

Assembly Challenge : Jump to a non-relative address without using registers

During developing a dispatch table for some instructions in binaries, one of the challenging problem which I faced, was changing the registers state in a way that doesn’t affect the program flow!

Import Address Table (IAT) in action

Did you ever think about how different dll files with different versions and obviously with different addresses of functions work perfectly together ? The answer is Import Address Table (IAT).

GRE over IPSec in Cisco IOS

Cisco GRE over IPSEC

[caption id=”” align=”alignnone” width=”626"]

gre/ipsec diagram[/caption]

In the following is a sample configuration for GRE/IPSEC in Cisco IOS devices. you can tailor…

Defeat Malware’s Dynamic Api Loading

There are thousands of ways which makes malwares resist against static dissambling and static analysing.
One of the known ways to circumvent against suspicious API blocking or analysing statically by AV’s, is using LoadLibrary API to dynamically load a library then…