Live Stream VOD: Mishapulator A Memory-Only Emulator
Added 2023-07-18 00:48:33 +0000 UTCThis is a bit of a different stream where we investigate a novel idea from @mishap where emulation is performed only on memory based instructions. The concept is that this may end up being a useful (fast) tool for generic string decryption problems.
The stream itself is a bit boring and sort of a failure as we realize a lot more work is required to get the emulator to run in generic scenarios but I think this is a very promising idea. Work continues on the project off-stream.
The initial proof of concept for the emulator can be found here: pxor_string_decrypt_wip.py
Notes:
Memory-Only Emulation Trace (@mishap)
