<div dir="ltr">Does anyone have hardware,hardrive space to spare that we could use?<div><br></div><div>Regards</div><div>Timo</div></div><div class="gmail_extra"><br><div class="gmail_quote">On 23 November 2015 at 09:45, Wicus Ross <span dir="ltr"><<a href="mailto:wicusross@runbox.com" target="_blank">wicusross@runbox.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I've found reverse engineering to be very entertaining. I'm interested in joining the interest group.<br>
<div><div class="h5"><br>
On Fri, 20 Nov 2015 08:17:47 +0200, Timo Goosen <<a href="mailto:timogoosen@gmail.com">timogoosen@gmail.com</a>> wrote:<br>
<br>
> Cool I'm not sure what platform we should all use to interact we could<br>
> probably use this mailing list for now.<br>
><br>
> If you guys want to learn RE of malware then I suggest this tutorial series:<br>
> <a href="http://fumalwareanalysis.blogspot.kr/p/malware-analysis-tutorials-reverse.html" rel="noreferrer" target="_blank">http://fumalwareanalysis.blogspot.kr/p/malware-analysis-tutorials-reverse.html</a><br>
><br>
> If anyone has hardware lying around it would be really cool to install this<br>
> on some old server hardware:<br>
> <a href="https://www.proteansec.com/linux/installing-using-cuckoo-malware-analysis-sandbox/" rel="noreferrer" target="_blank">https://www.proteansec.com/linux/installing-using-cuckoo-malware-analysis-sandbox/</a><br>
><br>
> What I'm reading at the moment:(I'm mostly interested in Windows malware)<br>
> <a href="http://win32assembly.programminghorizon.com/tutorials.html" rel="noreferrer" target="_blank">http://win32assembly.programminghorizon.com/tutorials.html</a><br>
><br>
> Its very important to know the PE structure:(Portable Executable)<br>
> <a href="https://code.google.com/p/corkami/wiki/PE" rel="noreferrer" target="_blank">https://code.google.com/p/corkami/wiki/PE</a><br>
><br>
> <a href="http://www.ntcore.com/files/inject2exe.htm#PEMakerDownloadLink5" rel="noreferrer" target="_blank">http://www.ntcore.com/files/inject2exe.htm#PEMakerDownloadLink5</a><br>
><br>
><br>
> Would be cool if we can get a collection of samples together and of<br>
> sample's source code.<br>
> I was thinking of getting together sometimes and everyone can share what<br>
> they are reading or working on.<br>
><br>
> Regards.<br>
> Timo<br>
><br>
><br>
><br>
><br>
> On 19 November 2015 at 15:37, Christo <<a href="mailto:christo.goosen@owasp.org">christo.goosen@owasp.org</a>> wrote:<br>
><br>
> > Would be an interesting skill set to acquire<br>
> ><br>
> > CG<br>
> ><br>
> > On 19/11/2015 15:34, Sakhi Louw wrote:<br>
> ><br>
> > Hi Timo,<br>
> ><br>
> > I would be interested in starting one.<br>
> ><br>
> ><br>
> > On Thu, Nov 19, 2015 at 3:22 PM, Timo Goosen <<a href="mailto:timogoosen@gmail.com">timogoosen@gmail.com</a>> wrote:<br>
> ><br>
> >> Would anyone be interested in starting a malware research group?<br>
> >><br>
> >><br>
> >> Regards.<br>
> >> Timo<br>
> >><br>
> >> _______________________________________________<br>
> >> Owasp-cape-town mailing list<br>
> >> <a href="mailto:Owasp-cape-town@lists.owasp.org">Owasp-cape-town@lists.owasp.org</a><br>
> >> <a href="https://lists.owasp.org/mailman/listinfo/owasp-cape-town" rel="noreferrer" target="_blank">https://lists.owasp.org/mailman/listinfo/owasp-cape-town</a><br>
> >><br>
> >><br>
> ><br>
> ><br>
> > --<br>
> > Sakhi Louw<br>
> ><br>
> ><br>
> ><br>
> > _______________________________________________<br>
</div></div>> > Owasp-cape-town mailing listOwasp-cape-town@lists.owasp.orghttps://<a href="http://lists.owasp.org/mailman/listinfo/owasp-cape-town" rel="noreferrer" target="_blank">lists.owasp.org/mailman/listinfo/owasp-cape-town</a><br>
<span class="">> ><br>
> ><br>
> > --<br>
> > [image: OWASP Logo]<br>
> ><br>
> ><br>
> > Christo Goosen<br>
> > OWASP Cape Town Chapter Leader<br>
</span>> > OWASP Foundationhttps://<a href="http://www.owasp.org" rel="noreferrer" target="_blank">www.owasp.org</a><br>
<span class="im HOEnZb">> ><br>
> ><br>
> > _______________________________________________<br>
> > Owasp-cape-town mailing list<br>
> > <a href="mailto:Owasp-cape-town@lists.owasp.org">Owasp-cape-town@lists.owasp.org</a><br>
> > <a href="https://lists.owasp.org/mailman/listinfo/owasp-cape-town" rel="noreferrer" target="_blank">https://lists.owasp.org/mailman/listinfo/owasp-cape-town</a><br>
> ><br>
> ><br>
</span><div class="HOEnZb"><div class="h5">> _______________________________________________<br>
> Owasp-cape-town mailing list<br>
> <a href="mailto:Owasp-cape-town@lists.owasp.org">Owasp-cape-town@lists.owasp.org</a><br>
> <a href="https://lists.owasp.org/mailman/listinfo/owasp-cape-town" rel="noreferrer" target="_blank">https://lists.owasp.org/mailman/listinfo/owasp-cape-town</a><br>
<br>
<br>
</div></div></blockquote></div><br></div>