In this final recipe, we'll conclude our dynamic analysis phase against this binary and will encounter more deobfuscation instructions. This is good practice, so keep at it. By the time we finish this recipe, you should be a pro at identifying deobfuscation loops.
Wrapping up dynamic analysis
Getting ready
We need to perform the following instructions before we can work on this recipe.
- If VirtualBox is not running, open it and start the Ubuntu 64-bit virtual machine.
- Once the virtual machine is running, open the Terminal application and change the working directory to ~/bac/Binary-Analysis-Cookbook/Chapter-10/64bit.
- Launch EDB against the example binary using the following command:
$ edb --run ./ch10-revshell64-poly...