Comments on: Everything can be reversed. Everything. http://chirashi.zenconsult.net/2010/07/everything-can-be-reversed-everything/ A blog with scattered thoughts on security Thu, 29 Dec 2011 12:49:00 +0000 hourly 1 http://wordpress.org/?v=3.2.1 By: Anonymous http://chirashi.zenconsult.net/2010/07/everything-can-be-reversed-everything/#comment-259 Anonymous Fri, 14 Oct 2011 02:35:00 +0000 http://chirashi.zensay.com/?p=533#comment-259 All I can say is start with rapc.jar. Decompile it and do your best to deobfuscate it without losing your mind. Since I'm already recovering in a mental institution after this process, I have been forbidden from releasing anything to the public for fear that I will relapse. I used both JD-GUI as well as JAD to decompile the file. The more decompilers you have the better (try the others like Cavaj, Sable/Dava, etc). Use Eclipse. Its the shizz.  Once you have rapc running from Eclipse, you can begin to take rapc apart. There is a distinct set of modules in rapc that will take a class file's members, attributes and properties, etc and convert them to a .cod file. Some parts are done using a lookup table for bytecode. You will find this table inside rapc.jar. Your goal is to take a .cod file and bring it back into a .class file (all the resources to do this are in rapc.jar). To get java code, all you have to do is decompile the class file. Good luck. I'll save you a seat in my ward. Ooh Friday is lime jello day!! All I can say is start with rapc.jar. Decompile it and do your best to deobfuscate it without losing your mind. Since I’m already recovering in a mental institution after this process, I have been forbidden from releasing anything to the public for fear that I will relapse. I used both JD-GUI as well as JAD to decompile the file. The more decompilers you have the better (try the others like Cavaj, Sable/Dava, etc). Use Eclipse. Its the shizz. 

Once you have rapc running from Eclipse, you can begin to take rapc apart. There is a distinct set of modules in rapc that will take a class file’s members, attributes and properties, etc and convert them to a .cod file. Some parts are done using a lookup table for bytecode. You will find this table inside rapc.jar. Your goal is to take a .cod file and bring it back into a .class file (all the resources to do this are in rapc.jar). To get java code, all you have to do is decompile the class file. Good luck. I’ll save you a seat in my ward. Ooh Friday is lime jello day!!

]]> By: _M_ http://chirashi.zenconsult.net/2010/07/everything-can-be-reversed-everything/#comment-258 _M_ Thu, 13 Oct 2011 20:35:00 +0000 http://chirashi.zensay.com/?p=533#comment-258 Intreresting article.. I've googled till exhaustion and you are the only one that states that can produce clear Java code. Until know I was only able to test codec, and although it prodices some code there are still plenty of opcodes that do not have clear Java translation. Are you going to release your code? Assuming you are not going to do it, any clues on how should I proceed to reproduce your work? You already spotted out couple of things I did know which is preverify and rapc.jar are the clue.. Anything else?   Intreresting article.. I’ve googled till exhaustion and you are the only one that states that can produce clear Java code. Until know I was only able to test codec, and although it prodices some code there are still plenty of opcodes that do not have clear Java translation.

Are you going to release your code? Assuming you are not going to do it, any clues on how should I proceed to reproduce your work? You already spotted out couple of things I did know which is preverify and rapc.jar are the clue..

Anything else?
 

]]> By: Puttering around with BlackBerry forensics — Part 2 | Chirashi Security http://chirashi.zenconsult.net/2010/07/everything-can-be-reversed-everything/#comment-256 Puttering around with BlackBerry forensics — Part 2 | Chirashi Security Fri, 30 Sep 2011 14:53:31 +0000 http://chirashi.zensay.com/?p=533#comment-256 [...] is to ensure that you do not import .con files belonging to other devices. I haven’t bothered reverse engineering the .cod files yet to see what they use to generate this signature. In the tests I did, however, it [...] [...] is to ensure that you do not import .con files belonging to other devices. I haven’t bothered reverse engineering the .cod files yet to see what they use to generate this signature. In the tests I did, however, it [...]

]]> By: Robert Dunn http://chirashi.zenconsult.net/2010/07/everything-can-be-reversed-everything/#comment-249 Robert Dunn Mon, 29 Aug 2011 18:22:00 +0000 http://chirashi.zensay.com/?p=533#comment-249 How about reverse-engineering the Blackberry OS? How about reverse-engineering the Blackberry OS?

]]> By: A A http://chirashi.zenconsult.net/2010/07/everything-can-be-reversed-everything/#comment-231 A A Thu, 19 Aug 2010 08:48:11 +0000 http://chirashi.zensay.com/?p=533#comment-231 Impressive work. Are you likely to release a decompiler? What sort of persuasion would you need :) Impressive work. Are you likely to release a decompiler? What sort of persuasion would you need :)

]]>