Re: Tools to analyze "captured" binaries?

[karthik_krish76 () YAHOO COM (karthik krishnamurthy)]

--- Rob Lee <rob () KARRDE COM> wrote:

> It is interesting to note that most "script kiddies"
> will compile programs
> straight from the "makefile" without adjusting the
> properties inside that
> file.  For instance, the default for tfn (TRIBE
> FLOOD NETWORK) and some
> other programs compiles the program with debugging
> symbols.  If a hacker is
> smart and he is good he will statically link his
> executable and then strip
> it.  This would make the binary VERY hard to take
> apart.  But luckily for us
> security types and forensic experts, most hackers do
> not go to this detail.
> But THE GOOD ONES WILL!!!

from the attacker's viewpoint, wont a statically
linked trojan more conspicous because of its size.
regards

__________________________________________________
Do You Yahoo!?
Send online invitations with Yahoo! Invites.
http://invites.yahoo.com