[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGnwWSBXGt3W2MymwPxaIjG74Qceh4grJoTfdW8UNCQY":3,"$fPOZdEDtLnnDGF-GSM9q-YOFKV1frI5vSBS3dSHWlSIo":58},{"slug":4,"title":5,"summary":6,"category":7,"author":10,"image_url":16,"image_thumb_url":16,"published_at":17,"updated_at":18,"body_html":19,"keywords":20,"reading_time_minutes":21,"related_articles":22,"related_course":14,"related_specialty":14},"realizando-ingenieria-inversa-a-perfect-keylogger","Realizando Ingeniería inversa a perfect keylogger","Perfect keylogger es una herramienta popular que gano varios premios, traducido más de 20 idiomas, como su nombre lo indica nos permitirá capturar las pulsaciones de teclado, el mouse, screenshot, etc.",{"slug":8,"name":9},"reverse-engineering","Ingeniería Inversa",{"username":11,"name":12,"avatar_url":13,"headline":14,"aboutme":15},"Lior","Rafael PeruCrackers","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBdGdKIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--18ea99d6876a18ae422b2c3858846ac9d9979bfa\u002F41473879_681300015589328_2914457510192611328_n.jpg",null,"Estudiante de la ingenieria Inversa usando las herramientas de Ollydbg y el actual IDA PRO, actualmente me encuentro investigando sobre Creacion de Exploit, con animo de ayudar a las personas que les interesa el mundo del reversing, :)","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBaXdPIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--6c507c1f4f5d08da1a7509860e915cb3f81d6709\u002Fshutterstock_751469620.jpg","2017-06-02T23:06:31-04:00","2026-10-26T18:12:30-03:00","\u003Ch3>Información de la víctima\u003C\u002Fh3>\r\n\u003Cp>Es una herramienta popular que gano varios premios, traducido más de 20 idiomas, como su nombre lo indica nos permitirá capturar las pulsaciones de teclado, el mouse, screenshot, etc.\u003C\u002Fp>\r\n\u003Ch2>Al ataque\u003C\u002Fh2>\r\n\u003Cp>Primero usaremos RDG Packer Detector, para ver si tiene protección o se encuentra empaquetado, además nos permitirá ver en que lenguaje se desarrolló la aplicación.\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh4.googleusercontent.com\u002FUN_gQT4-vx7i0KJUhQEl-1_RIf4nqJMUVRSRpC284IXSopMCN_yxFuammb00coDrbCLosK5m_31B6SWpvauzs1dDeTdfB6v6r7coBjMFLzpDvxqvVzih2UTcXD1AodRhthGzbTcJhP2yO_PLBQ\" width=\"447\" height=\"235\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Ch3>NOTA\u003C\u002Fh3>\r\n\u003Cp>Se aconseja sacar un backup del .exe principal por medida de seguridad, ya que se realizara cambios que pueden afectar o perjudicar el software. Así que a copiar y pegar en un directorio aparte y tener un bloc de notas para apuntar los datos principales (Como la vieja escuela).\u003C\u002Fp>\r\n\u003Cdiv> \u003C\u002Fdiv>\r\n\u003Cdiv>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh5.googleusercontent.com\u002FKXtKs736OyvZhIZM7MvWeW2o-hvYLeqhYSfllYUSL3h6ksHsNUCqbiaY8Awu9HWu5SDbJ8uhNTY_OUjDPBmezt0zh8tzKoddokfL1AaBzvnraMTVhI6okiK9SSlatocYGiFbcIv5yunNp_DSVw\" width=\"568\" height=\"181\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fdiv>\r\n\u003Cdiv> \u003C\u002Fdiv>\r\n\u003Cp>Ahora pasaremos analizar el software y ver qué tipo de protección posee, ejecutemos la aplicación:\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cul>\r\n\u003Cli>1) Duración Limitada, el programador pretender que su software se utilice un cierto tiempo para que luego deje de funcionar cumplido sus días.\u003C\u002Fli>\r\n\u003C\u002Ful>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cdiv> \u003C\u002Fdiv>\r\n\u003Cdiv>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh4.googleusercontent.com\u002FzigWjBbXVINDhp2scZ59lcWKQ1Y_Q_COlwb-YTNTHWD2TQK1MVxWthu9C5TLWIOTflIqTu9cvF6-NwdNUgPzvo4ePH2R-e07h8VFE-_WzJ2wdD7rtQGneSKmdmZ8OHgjhW_8fOdVHU33dWHdmA\" width=\"309\" height=\"183\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fdiv>\r\n\u003Cdiv> \u003C\u002Fdiv>\r\n\u003Cdiv> \u003C\u002Fdiv>\r\n\u003Cp>Ahora vamos a obtener información del “BAD BOY”\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh4.googleusercontent.com\u002FUfFXwlNRd08iI2A3WU1C2dqRrCHzDdG7ZqYHTcnIOrb2MJFtLqJHEBImFFf3e_u1o-ihsVYfItJCZMMwsuIChwXgIDRrkAxNzIEanHQtYpChBlIGmtiELOjwsoOS_0-QQ3YE9jN0bbT0o2qTag\" width=\"360\" height=\"521\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cp>Al tener el dato del “BAD BOY” que dice: “Registration code or user name is invalid. Please check all fields and try again!”, buscaremos el texto en Text string referenced, en este caso me estoy saltando otros pasos, debido a que se explicó en otros tutoriales.\u003C\u002Fp>\r\n\u003Cdiv> \u003C\u002Fdiv>\r\n\u003Cdiv>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh3.googleusercontent.com\u002FRJSXylfOQcLMPT2RvoUUtJFpwSechvdGnE5jZTkUedDfeguc01zjudiA-EcohDMv9DeG01SfyzmqemOhG3RuUYERAn9P9AOw9eLDhDXTjpV9oq0JuCKVNgze8GUc07fgVBdWpEB9KU_LzLTWHg\" width=\"651\" height=\"131\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fdiv>\r\n\u003Cdiv> \u003C\u002Fdiv>\r\n\u003Cdiv> \u003C\u002Fdiv>\r\n\u003Cp>En este caso me apareció que la dirección de la memoria \u003Cem>0041ABDB\u003C\u002Fem> presenta el string que buscamos, hacemos clic derecho en el texto -> Follow import in Disassembler.\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh4.googleusercontent.com\u002FhX1XXmgl_OIP73jMG3Kxt47o527Thn5nSn90yIgLZGY8puA45j37ndzhPqLbVTBtCd3oyGmOb17X-Zx2iR4pQKb0iviPYDHfJDx6LLf_1t26SSCCRyj9cA0kZiMOTPjN7JLI3dRjc2CluB2o_w\" width=\"650\" height=\"185\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>En este se analizó anteriormente y vimos que toda la validación se encuentra dentro de un CALL, de lo cual como se observa verás un return en la dirección de memoria 0041AC01, donde nos indica que retornara al CALL, para ello agregue un BP (BreakPoint), para detener el proceso en esa dirección, pero antes de eso debo hallar el inicio de todo ese CALL (Proceso).\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh5.googleusercontent.com\u002FwmFSwVZBTv-l8q23ENsUuSLZ2_xnEvz2uMAqH1qkziMlOpjT87wP4ht7scbN3cquYRWY61V8GbHZ_ycdTJMCj20CoRPFoXoh6-rep9ZtOKwBlYEj3j98VmF5aLdzBWq2i_sWkhSv02IHNsE0kQ\" width=\"667\" height=\"362\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>Llegamos a la dirección de memoria 0041AA37 donde es el inicio del proceso de lo cual agrego un BP (BreakPoint), recuerde que estamos dentro de un CALL (Proceso), donde analizara las credenciales, en mi caso escribí: \u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>Usuario: L1Or\u003Cbr>\u003C\u002Fspan>\u003Cspan>Clave: AAAA-BBBB-CCCC-DDDD\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cbr>\u003C\u002Fspan>\u003Cspan>De ley que no conocemos la clave, pero pronto lo conoceremos ☺, así que presionamos “F9”, o play y agregamos las credenciales y se detendrá en la dirección 0041AA37, donde inicia el proceso de validación.\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh4.googleusercontent.com\u002FXLLCbeJg3goX4WuayR4hXnRyiYbya57nwJ0UobPAmgved8cG5UTsfRoXxtiLAqZmV4Il8VA2LwuVeZ_v0nudLfGnot5W5C7P___1773aBOn8CdVk6yNv4orjb721O6IL4HFPXRQNQndWlz-C5g\" width=\"594\" height=\"334\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>Procederemos a tracear con “F8”, hasta llegar a la dirección de memoria 0041AB04 (Numero 1 de color amarillo), donde se observa que nuestro primer bloque de clave introducido es “AAAA”, al parecer lo esta alojando en la pila.\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh6.googleusercontent.com\u002FYhkvp5KF_UpbwRHpwunZKrYJNvMmI-YcFlAsgkWO6cuT1eRwh0eIt3gph4NWMF3H0k2LrhM0RTgRVG9tewlxaW-NvyHWcuKM3qdJybGEtvpyOs0aAIvGboFI6vogu33VHGzzTWNmsdjGQ6bMiQ\" width=\"605\" height=\"348\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cp>\u003Cspan>Seguimos tracenado y llegamos a la dirección de memoria 0041AB18 donde nos muestra el string “BBBB”, donde también lo pushea en la pila.\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh3.googleusercontent.com\u002F-_qy0fWW5RjYtpcjuAoBjDhpjsMrHBWyw4tsFZVfMSrCdeLyUOX7uwXk5GEOF9Tp0jKBz5bwr5t7yxaDfcp0kYVAgwN2aPq-xRZwwtMXZvV2sB4SXgkEv9NlOM36NSEu-gS2NF-_8yUZRuQsgg\" width=\"626\" height=\"361\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>En el tercer string “CCCC”, lo pushea hacia la pila y si te percatas en la dirección de memoria 0041AB26, se aloja la clave ingresado.\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh4.googleusercontent.com\u002FF3IjzDhbZXJUYmu1k26yTco3AQfrWHM-ah_gUH5ul4BzfOH38z36ses1T4SBHvWYVBFgaJj49FigwKLoVQmdkRhXMmTCO26P10KPfu4Y5LgmWvFes57MvSZ8CHXCqd4P_EuxpfRr4zb6sRP_Dg\" width=\"626\" height=\"361\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>En el cuarto string nos muestra el string “DDDD”, en donde observamos que es el último bloque y en donde terminara el proceso de unir los cuatro bloque de texto, para mostrarnos AAAABBBBCCCCDDDD, seguiremos tracenado con “\u003Cstrong>F8\u003C\u002Fstrong>”.\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh6.googleusercontent.com\u002F4oxbS5pUVJ_ImTSiBd_1whsuBkkhfTeDRDdpy91x-OzU2h-kfytb7ZtwYJuSv2STCmndu94Hqr8Y2-1QNeh8tw5sT0dHwE80lCCfqkCk7k6cglHuusQWnq239BU7MGjQ40hLVTVFXv7lMMiHQQ\" width=\"579\" height=\"333\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>Como observamos en la dirección de memoria 0041AB51, nos muestra el string2 = “AAAABBBBCCCCDDDD” y líneas más abajo nos muestra el string1, seguimos traceando con “F8”.\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh3.googleusercontent.com\u002FBenOf75bkZ4xVZDDZuD-hf3YkNMOdgQGt8FeuGJScnJcGGd3zdFTEgbS77-oPOG_qXKzsvhDsHhSWueC8ENcqPhLX4taPGIEjrQInPBRHlcnU1D9E70vVoUKGiWFYysoNfKybDzws84x423bQQ\" width=\"591\" height=\"361\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>\u003Cspan>En la dirección de memoria 0041AB58 con el string1 = “TREKAYIYWHSJHERM”, es la supuesta clave, pero como llegamos a validar que es la correcta, debido a que vemos líneas más abajo la clase lstrcmpiA, su función es comparar dos string y si no es correcto salta a la “BAD BOY”.\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cimg src=\"https:\u002F\u002Flh4.googleusercontent.com\u002FmxRoAshbqDiFl_pMaAVqSpLtqHYGMwHSq1JUtqV1bEsf-g91oHglhG_ro8QaR79vWN0VYxQp3Y0Vef7DkC3bYNC1FdRjiu4tzmcWam219_oIMTg32wg3WrxqEvsvrLcC9V7gw2txPdZrp1dDpw\" width=\"567\" height=\"326\">\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cdiv> \u003C\u002Fdiv>\r\n\u003Cp>En este caso yo apunte el string1 y lo registre con mi usuario L1oR y Clave: “TREK-AYIY-WHSJ-HERM”, donde nos muestra que la clave ingresa es correcto, en este punto me percate que el uno de las variables que ayuda generar la clave es el usuario ingresado, si ingresamos otro usuario y con la misma clave, nos aparecera el “BAD BOY”. Tengo mi bloc de notas para que vean lo importante que es tomar apuntes.\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh5.googleusercontent.com\u002FxvIRbX6i_C9GGSrl43E7ygQD7l30zLjaS4xV2jxycUBzNnpKqCNfeGMax80MZRjtcwQc7CKUbmwGGzmxlvBJWn9MafE23DB0yzGZZq1V590ecOONx_iCVXzw1CTgHPq80k70t9dwf2dG-lK9zQ\" width=\"589\" height=\"355\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Ch2>\u003Cspan>SEGUNDO METODO\u003C\u002Fspan>\u003C\u002Fh2>\r\n\u003Cp>\u003Cspan>Nuevamente traceamos “F8” y nos detenemos en la dirección de memoria 0041AB61, en esta línea veremos el salto hacia el “BAD BOY”, es decir:\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>Si JNZ -> Salta debido a que Z=0, por lo tanto, como podremos llegar al “GOOD BOY”?, Para ello hacemos doble clic en la bandera Z para que cambie de valor a “1”, y así evitar que salte. \u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cdiv> \u003C\u002Fdiv>\r\n\u003Cdiv>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh5.googleusercontent.com\u002FCMc8cUsWpSO7InDD-bWAyDnKfmdg7ZSoNdLgF4sJDl6t1NSg-gU46TLt19ozvCmzyn3Png2MBJjfjCEercGRUKz3jQosmgacizfk_QYbEjMeug0seUSTLBBYJH2D3kjrjuJrwHCxrzg1r5cB3g\" width=\"595\" height=\"273\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fdiv>\r\n\u003Cdiv>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fdiv>\r\n\u003Cdiv> \u003C\u002Fdiv>\r\n\u003Cp>Como se observa el Flag Z=1, entonces no salta y aparece la carita “GOOD BOY”, por lo tanto estamos en buen camino y podemos decir que ya esta, pero debemos parcharlo, tener en cuenta que si me salto algunos pasos es porque ya leyeron los anteriores tutoriales, si no es así entonces lean jaja.\u003C\u002Fp>\r\n\u003Cp> \u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh3.googleusercontent.com\u002FjiIObipsQ1FF7oDRAIg5QbpmPAiAvuRNXK00MxSAsK_itpzTENIAXq-1ZW4-32ImrRWVgDhnCOKZnkQvjtcxGTsFSpqIvBOf4u992HbMO8BjtcYe2tP56-LAEfHNfkoU7zsr-dVo81GGDdRpvg\" width=\"595\" height=\"262\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>Si seguimos traceando podemos ver que se ejecuta el MessageBox del “GOOD BOY”.\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan>\u003Cimg src=\"https:\u002F\u002Flh4.googleusercontent.com\u002F0DpdosjqEFsssQjn9IkYyERajdInSdT4BSQM7Fi6i_p6q98J4E_1FYV2aRe1ia4B9ZyUtQ1V8jYTCymoVitvhczOzGRGyKHUPjQRwXEnava2dwinXUbGZKP_uEEnebcA7txOpyLtT39pEOlVUA\" width=\"437\" height=\"233\">\u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003Cspan> \u003C\u002Fspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>Y al final de todo sé parcho, en este punto doy un tiempo para poder reflexionar y decir que a pesar de que es un software dedicado a seguridad, no se preocupa por los método de protección de su producto, por otro lado si tienen alguna duda del tutorial, pueden comentar estaré al tanto de sus dudas y poder brindarle mi poca experiencia. Ahí nos vemos.\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>\u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cp>\u003Cspan>HAPPY CRACKING. \u003C\u002Fspan>\u003C\u002Fp>\r\n\u003Cdiv> \u003C\u002Fdiv>\r\n\u003Cp> \u003C\u002Fp>","Ingeniería inversa",5,[23,35,46],{"slug":24,"title":25,"summary":26,"category":27,"author":28,"image_url":32,"image_thumb_url":32,"published_at":33,"updated_at":34},"inteligencia-de-amenazas-ciberneticas-con-ibm-x-force-exchange","Inteligencia de Amenazas Cibernéticas con IBM X-FORCE EXCHANGE","La inteligencia de amenazas ciberneticas tiene muchas aristas, y se deben utilizar muchas herramientas para tomar un veredicto en relación a una dirección ip o url , que se encuentra generando trafico hasta nuestro sitio web.",{"slug":8,"name":9},{"username":29,"name":30,"avatar_url":31},"user-1543237612","Cristian Jose Acuña  Ramirez","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBaUFQIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--c84d5840f618ed711f6d776d0a8e54daa3f13bbe\u002F6e76f75b-b5b8-49f8-8b6a-73d757ad7c65.jpg","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBdDhPIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--8bae43d6642cf508a945274c83140364f49adc3d\u002Fshutterstock_1712503435.jpg","2020-09-04T11:38:43-04:00","2026-10-26T19:14:12-03:00",{"slug":36,"title":37,"summary":38,"category":39,"author":40,"image_url":43,"image_thumb_url":43,"published_at":44,"updated_at":45},"simple-reverse-icmp-shell","Simple reverse ICMP Shell","Planteando el escenario para ejecutar nuestra revershell, tenemos un equipo al que ya tenemos acceso con un usuario que nos permitirá la ejecución del Reverse shell ICMP en powershell.",{"slug":8,"name":9},{"username":41,"name":42,"avatar_url":14},"elzerpineda","Elzer Pineda","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBdlFPIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--f839aa72cf39bd28065fd4b33680a238fc0ee42a\u002Fshutterstock_1382645309.jpg","2020-07-20T13:14:51-04:00","2026-10-26T12:22:02-03:00",{"slug":47,"title":48,"summary":49,"category":50,"author":51,"image_url":55,"image_thumb_url":55,"published_at":56,"updated_at":57},"4chan-y-nido-org-conoce-que-es-un-imageboard-o-tablon-de-imagenes","4chan y nido.org - Conoce todo sobre los Imageboard o tablón de imágenes.","La historia de los foros o tablón de imágenes (También conocidos en inglés como imageboard) data de 1999, cuando se creó el imageboard anónimo 2channel (2ch), este es un popular foro de imágenes creado en Japón con el objetivo de discutir sobre cómics japoneses y animé.",{"slug":8,"name":9},{"username":52,"name":53,"avatar_url":54},"pmcguirec","Paola Mc Guire Cancino","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBbHNTIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--2bf31b5bf5b3e51e57bd3d83fc5b3c84e336e11d\u002FIMG_4294-3.jpg","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBckFPIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--5da25444100f4afc83fe2109fbecaa01d27cc8b0\u002FPost192_NN1.png","2019-02-26T21:57:26-03:00","2026-10-26T10:39:47-03:00",{"levels":59,"specialties":72,"categories":88,"instructors":122,"article_categories":160,"article_authors":189,"discussion_categories":302},[60,64,68],{"slug":61,"name":62,"courses_count":63},"basicos","Basicos",15,{"slug":65,"name":66,"courses_count":67},"intermedios","Intermedios",28,{"slug":69,"name":70,"courses_count":71},"avanzados","Avanzados",16,[73,76,80,84],{"slug":74,"name":75,"courses_count":21},"enterprise-pentesting-training-ept","Penetration Testing Student",{"slug":77,"name":78,"courses_count":79},"penetration-testing-and-ethical-hacking-pthh","Penetration Testing Professional",7,{"slug":81,"name":82,"courses_count":83},"web-application-testing-wat","Web Application Testing",12,{"slug":85,"name":86,"courses_count":87},"information-security-training-ist","Information Security Analyst",6,[89,93,96,100,103,106,109,113,116,119],{"slug":90,"name":91,"courses_count":92},"administracion-de-servidores","Administración de Servidores",1,{"slug":94,"name":95,"courses_count":92},"vulnerability-analysis","Análisis de Vulnerabilidades",{"slug":97,"name":98,"courses_count":99},"auditoria-de-redes","Auditoría de Redes Informáticas",4,{"slug":101,"name":102,"courses_count":87},"auditorias-wireless","Auditorías Wireless",{"slug":104,"name":105,"courses_count":21},"forense","Forense ",{"slug":107,"name":108,"courses_count":83},"pentesting","Pentesting ",{"slug":110,"name":111,"courses_count":112},"pentesting-mobile","Pentesting a Aplicaciones Móviles",2,{"slug":114,"name":115,"courses_count":83},"auditoria-aplicaciones-web","Pentesting a Aplicaciones Web",{"slug":117,"name":118,"courses_count":99},"programacion","Programación",{"slug":120,"name":121,"courses_count":83},"seguridad-informacion","Seguridad de la información",[123,127,131,134,137,140,143,145,148,151,154,157],{"username":124,"name":125,"courses_count":126},"misaelban","Misael Banales",21,{"username":128,"name":129,"courses_count":130},"Sheyla_Leacock","Sheyla Leacock",8,{"username":132,"name":133,"courses_count":79},"Rodolfo","Rodolfo Cecena",{"username":135,"name":136,"courses_count":87},"ggomez","Gianncarlo Gómez",{"username":138,"name":139,"courses_count":21},"yulytas","Julita Inca",{"username":141,"name":142,"courses_count":99},"pacopadilcyber","Juan Francisco Padilla Suaste",{"username":29,"name":30,"courses_count":144},3,{"username":146,"name":147,"courses_count":92},"user-22500","Ignacio Benedini",{"username":149,"name":150,"courses_count":92},"magdielgutierrez","Magdiel Gutierrez",{"username":152,"name":153,"courses_count":92},"Mroodriguezb","Mario Rodriguez Barraza",{"username":155,"name":156,"courses_count":92},"coldd","Martin Frias",{"username":158,"name":159,"courses_count":92},"Omar_veliz","Omar Jacobo Muñoz Veliz",[161,162,164,168,170,171,174,175,177,179,180,182,184,187],{"slug":90,"name":91,"articles_count":83},{"slug":94,"name":95,"articles_count":163},9,{"slug":165,"name":166,"articles_count":167},"wireless-attacks","Ataque al Protocolo Wireless",11,{"slug":97,"name":98,"articles_count":169},13,{"slug":101,"name":102,"articles_count":144},{"slug":172,"name":173,"articles_count":112},"exploitation-tools","Explotación de Vulnerabilidades",{"slug":104,"name":105,"articles_count":163},{"slug":8,"name":9,"articles_count":176},26,{"slug":107,"name":108,"articles_count":178},99,{"slug":110,"name":111,"articles_count":163},{"slug":114,"name":115,"articles_count":181},33,{"slug":117,"name":118,"articles_count":183},27,{"slug":185,"name":186,"articles_count":167},"information-gathering","Recolección de Información",{"slug":120,"name":121,"articles_count":188},18,[190,193,196,201,202,207,211,212,216,217,219,223,227,228,232,235,236,239,243,247,251,255,257,261,264,268,272,276,279,281,285,288,291,294,298],{"username":158,"name":159,"avatar_url":191,"articles_count":192},"https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBdmdGIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--de6eb458d07377fb9d25e6ed92e1917f274c8cdb\u002Fprofile.jpg",70,{"username":124,"name":125,"avatar_url":194,"articles_count":195},"https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBam9HIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--fcb46747ff2b0df3099425d0012f4da090b1db67\u002FIMG_2344.PNG",32,{"username":197,"name":198,"avatar_url":199,"articles_count":200},"saamux","Samuel Esteban","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBbDRJIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--6e60a39152819c1c857e0a1e157e99a5fe76ddf9\u002Fperfil.png",30,{"username":11,"name":12,"avatar_url":13,"articles_count":176},{"username":203,"name":204,"avatar_url":205,"articles_count":206},"Felipe","Felipe Barrios","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBalVGIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--75c29db071130db1bdbb64cb6ed6b4b0767c7178\u002F12063705_10207273024561428_59106377850244238_n.jpg",17,{"username":208,"name":209,"avatar_url":210,"articles_count":71},"user-1582119990","José Moreno","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBczhMIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--695dbd13093235a9632272a6a98b0c9ef21a0319\u002FJoseMoreno-300x180.jpg",{"username":29,"name":30,"avatar_url":31,"articles_count":167},{"username":213,"name":214,"avatar_url":215,"articles_count":167},"__script1an__","Cristian Palma P","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBc1lKIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--f168fca2e13ca6bb4a0629e2e6a46fc45622c54b\u002FLOGO-URI-SPIONI-MH-1.png",{"username":155,"name":156,"avatar_url":14,"articles_count":79},{"username":128,"name":129,"avatar_url":218,"articles_count":87},"https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBb29TIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--33711e0178d99dfd591d736d16027b251892ab2e\u002F20210721_132408(2).jpg",{"username":220,"name":221,"avatar_url":222,"articles_count":21},"JediCanosa","Alejandro Canosa Ferreiro","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBclVKIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--9b0815c79e7690293117c5cf747d0d9889fd678e\u002F252860.jpg",{"username":224,"name":225,"avatar_url":226,"articles_count":21},"CrisMc","Cristian Mc Guire","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBbThLIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--ecd57b96e2e835d362d2d416b40f531b9752ffbe\u002FIMG-20171010-WA0000.jpg",{"username":41,"name":42,"avatar_url":14,"articles_count":21},{"username":229,"name":230,"avatar_url":231,"articles_count":144},"Funpunch","Andres Galeano","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBbThGIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--e169c1f44d47457dda7935fcd906ce67cf324bbe\u002Ffoto.jpg",{"username":233,"name":233,"avatar_url":234,"articles_count":144},"Pablo Olivares","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBdTRHIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--256f815e15650ad7609a7264df2d0c69742d870c\u002Fmetasploit.png",{"username":52,"name":53,"avatar_url":54,"articles_count":144},{"username":237,"name":238,"avatar_url":14,"articles_count":112},"D4RK0P","Alejandro Rivera",{"username":240,"name":241,"avatar_url":242,"articles_count":112},"user-1529427208","Arturo Ocampo","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBZzBMIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--5c0000472cdff7e7771f11070fa1e865142cc9a9\u002F8c9610617-codsalestease.nbcnews-ux-2880-1000.jpg",{"username":244,"name":245,"avatar_url":246,"articles_count":112},"CannibaL","Cannibal .","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBZ2NMIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--ae676f2a7e452c690824c196a556de0fd878d091\u002FGatoRison.jpg",{"username":248,"name":249,"avatar_url":250,"articles_count":112},"Erik172","Erik Garcia","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBc1lSIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--e703ff6245d2a783835ef18906375a5246ad1b84\u002Fgorickyourself.png",{"username":252,"name":253,"avatar_url":254,"articles_count":112},"damch","Javier Candia","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBam9KIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--036416498d87c59fa3f0ac1f5e0a08336b65faf5\u002Fdescarga.png",{"username":152,"name":153,"avatar_url":256,"articles_count":112},"https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBb1FSIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--d5c1cf9e6152977482e3d8a919cee58dc745a65c\u002Fimage_6483441.JPG",{"username":258,"name":259,"avatar_url":260,"articles_count":112},"user-1522264539","Sebastian Veliz","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBdW9LIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--8b572ca805a6e429859050c0eb0f9270a06aad7f\u002F28428972_394770877650233_1145374104606474240_n.jpg",{"username":262,"name":262,"avatar_url":263,"articles_count":112},"user-1609041409","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBaklNIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--536c91898c7c42c0a3008d37ec317309cb9805cc\u002F9178eae767eec8ff5750bd9a1cfdfe3b.png",{"username":265,"name":266,"avatar_url":267,"articles_count":92},"819215531446900","Alvaro Alexander Palacios Carrillo","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBaE1MIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--bd76f66adfaf8c1175ba43bb480eae08d23db24e\u002Ffoto.jpg",{"username":269,"name":270,"avatar_url":271,"articles_count":92},"gbrayhan","Brayhan Alejandro Gabriel Guerrero","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBamtKIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--e0e7cb50ebcfa80db9c0882df1e3f476c487a572\u002FalexPerfil.jpg",{"username":273,"name":274,"avatar_url":275,"articles_count":92},"els","Estevenson Luis Solano","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBbFlMIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--ac9a04550c2d3b3de33177e3dedd6116ff7bd898\u002Fdownload12.png",{"username":277,"name":278,"avatar_url":14,"articles_count":92},"user-1570553853","Flavio Esteban Canales Salvo",{"username":135,"name":136,"avatar_url":280,"articles_count":92},"https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBaW9IIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--a8a4afb1bc1cbf26867aa952a95ccfa68dd4b198\u002FImagen_1.png",{"username":282,"name":283,"avatar_url":284,"articles_count":92},"uservzk80","Israel Pérez","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBbmdJIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--f26a75b81bb7939355f4181925e7886394bfa1ea\u002FPwtZlZxn.jpg",{"username":286,"name":287,"avatar_url":14,"articles_count":92},"jongo","Jonathan González",{"username":289,"name":290,"avatar_url":14,"articles_count":92},"K1!!","José Guzmán",{"username":292,"name":293,"avatar_url":14,"articles_count":92},"garciaguirre","Moises Garciaguirre",{"username":295,"name":296,"avatar_url":297,"articles_count":92},"user-1571024443","Romario Miranda Paternina","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBcXdMIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--beccfc05028736f1068a40f35597ead611aef1f0\u002FIMG_20190910_145049285-01.jpeg",{"username":299,"name":300,"avatar_url":301,"articles_count":92},"shadebax","SHADE BAX","https:\u002F\u002Fapi.backtrackacademy.com\u002Frails\u002Factive_storage\u002Fblobs\u002Fredirect\u002FeyJfcmFpbHMiOnsibWVzc2FnZSI6IkJBaHBBamtMIiwiZXhwIjpudWxsLCJwdXIiOiJibG9iX2lkIn19--f59427b74236cfeb0c9c9f4b4d81bb898ce435a4\u002FHacker-icon.png",[303,304,305,306,308,310,311,312,313,315,316,318,320,321],{"slug":90,"name":91,"discussions_count":71},{"slug":94,"name":95,"discussions_count":167},{"slug":165,"name":166,"discussions_count":21},{"slug":97,"name":98,"discussions_count":307},25,{"slug":101,"name":102,"discussions_count":309},20,{"slug":172,"name":173,"discussions_count":71},{"slug":104,"name":105,"discussions_count":21},{"slug":8,"name":9,"discussions_count":144},{"slug":107,"name":108,"discussions_count":314},121,{"slug":110,"name":111,"discussions_count":188},{"slug":114,"name":115,"discussions_count":317},67,{"slug":117,"name":118,"discussions_count":319},40,{"slug":185,"name":186,"discussions_count":63},{"slug":120,"name":121,"discussions_count":322},55]