← Zach James

Writeups

Static and dynamic analysis of malware, x86 assembly deep-dives, and vulnerability research.

SQL Slammer: Static Shellcode Analysis
Reverse engineering the worm payload via IAT resolution through sqlsort.dll — tracing the propagation logic from the UDP spray to the shellcode entry point.
Michelangelo.DOS: Full Walkthrough
Complete reverse engineering walkthrough of the Michelangelo DOS virus — boot sector infection, payload trigger logic, and disk overwrite mechanics.
DOS7: Reverse Engineering Notes
Annotated walkthrough of the DOS7 sample — disassembly, infection mechanics, and payload analysis.
xorpd x86 Puzzles: Notes on all 64 exercises
Working through every exercise in xorpd's "little black book" — scanned handwritten notes for each snippet, covering bit manipulation, loop invariants, and obfuscation primitives.