That sounds really interesting. I use VirtualBox all the time and have done a bit of reverse-engineering in the past. Could you elaborate on how VirtualBox helps with reverse-engineering windows executables please?
Are you using it strictly as a virtualisation host, or are you using the fact that you can set up serial ports and whatnot to do Windows kernel debugging?
I personally use VMWare Fusion for reversing Windows executables, VMs are invaluable in that snapshotting aids in quickly returning to a known good state, and I can continue to take notes in applications outside of the VM to keep track of my progress.
Comments
Virtualbox is absolutely brilliant for reverse-engineering windows executables so I'm glad to hear this.
That sounds really interesting. I use VirtualBox all the time and have done a bit of reverse-engineering in the past. Could you elaborate on how VirtualBox helps with reverse-engineering windows executables please?
Are you using it strictly as a virtualisation host, or are you using the fact that you can set up serial ports and whatnot to do Windows kernel debugging?
I personally use VMWare Fusion for reversing Windows executables, VMs are invaluable in that snapshotting aids in quickly returning to a known good state, and I can continue to take notes in applications outside of the VM to keep track of my progress.
Both as a virtualisation host and I've dabbled in a bit of kernel debugging using it.
Can you point to a link for this, or briefly explain? Are you connecting vbox to a debugger?