#idapro

Make It Rain with MikroTik

Original text by Jacob Baines

Can you hear me in the… front?

I came into work to find an unusually high number of private Slack messages. They all pointed to the same tweet.

Why would this matter to me? I gave a talk at Derbycon about hunting for bugs in MikroTik’s RouterOS. I had a 9am Sunday time slot.

You don’t want a 9am Sunday time slot at Derbycon

Now that Zerodium is paying…

Table of Contents

Introduction

Intended Audience & Disclaimer

Conventions

IDAPython Background

Basics

Segments

Functions

Instructions

Operands

Xrefs

Searching

Selecting Data

Comments & Renaming

Accessing Raw Data

Patching

Input and Output

Intel Pin Logger

Batch File Generation

Executing Scripts

At last year's Defcon, I wandered around the vendor area looking for the EFF to make a donation. While looking for the EFF, I came across the No Starch Press booth and noticed that they had the second edition of The IDA Pro Book (also available at Amazon). As an IDA user, I had always wanted to read the first edition, but never made the time to do so. I had previously read several other No Starch Press books though and found that they were top-notch, so I picked up a copy of the second edition of the IDA Pro Book with every intention of reading it sooner rather than later.

However, once again, life happened and I was unable to start the book as soon as I had hoped. For a while the book just sat on my desk, beckoning me to read it, making me feel guilty each time I passed by it. Finally, I couldn't take it anymore. I decided to make it my New Year’s resolution to read the book.

Boy, am I glad that I finally read it! When people say the IDA Pro Book is the "The Unofficial Guide," they aren't kidding. This book has a wealth of knowledge. The book covers everything - how to change window layouts within IDA Pro, different function calling conventions, dealing with arrays, and how to create and modify structures without having to summon the power of Grayskull. The book not only gives you detailed, hard-to-find information about the finer aspects of IDA Pro, but also provides good tips and examples on general reverse engineering.