FUCKING TELEGRAM FUCK YOU STAY IN YOUR FUCKING API DOCUMENTATION AND STOP FUCKING TESTING YOUR SHIT ON A PRODUCTION SYSTEM WHY WOULD YOU DO THAT FUCK OFF WHY AM I EVEN DEVELOPING SHIT FOR YOUR PLATFORM ANYMORE WHEN FOLLOWING YOUR DOCUMENTATION LEADS TO FUCKING ERRORS AND WE HAVE TO DECOMPILE AND REVERSE ENGINEER YOUR FUCKING "OPEN SOURCE" APPS BECAUSE YOU DONT EVEN BOTHER TO FUCKING UPDATE THE SOURCE CODE ONCE A YEAR WHAT THE FUCK

Thank you for your attention

This fucking kid has the audacity to ask for me to decompile someone else's work and recompile it for a newer version. Wtf man

When I die, I want the R.I.P on my tombstone mean something different
Recursion Investigator Program

On my computer, there will be a file with that name
and when you decompile it to assembly
it will tell my life story in assembly

this will be a death propper for an assembly programmer

This one was probably last week of my highschool education so everyone including myself were drunk as fuck like 90% of the time.

Came home drunk one evening and woke up in the morning with a working keylogger waiting to be deployed on school computers. Apparently I've even implemented FTP upload, some basic firewall bypasses and autostart feature. Everything was actually quite good, excluding my stupidness to upload captured data on server through FTP, but there was anyways no-one smart enough in that school to decompile a Windows executable binary.

What's more interesting is until that moment I've never written anything remotely so complicated - I was doing examples from the book and didn't think I have enough knowledge to make program that has any real life application.

After that day it started coming to me that one day I could actually earn for life with programming.

"Want to edit that file? You need to clone [this], then install [x] followed by [y] and [z]. Then telnet into the 80's and curl this page directly from Ceefax. Install the binaries and compile the watchers. Hit ‘enableficate’ and wait whilst it builds the VM mirror. Remote desktop into the vm from a Windows2000 machine and install a UI. Search for [some file]. This is cross-compiled into an reverse ascii hex hashinator so you’ll need to decompile it using fudgeunpacker. Edit the file as required then reverse the entire process to synchronise it with the repo. You can then upload the file to the server (remember that [thisdomain] is on [some obscure remote server] so you’ll have to email them the file in [x localle] office hours)”

Devrant !! A platform for frustrated devs ranting about their runtime exceptions which only devs can decompile ... Cool

Came across an app that I really liked, but unfortunately, development has ceased for it. That also means I can't pay for it in order to get a license key. So what's a developer to do?

DECOMPILE it

After decompiling it, I placed inside the code that I paid for the app 😂

.field public static final MARKET:Ljava/lang/String; = "paid"

Just found Jetbrains dotPeek

Now I feel like a hacker

Just now... Got a job to create patch files for a couple of jars, which may or may not have varying class files. In total, I have to decompile, check, add and synchronize about 30 class files in 6 jars with a new functionality (that I didn't write). 🙂

FUCK PRODUCTION! WHY CANT YOU MAINTAIN ONE MOTHERFUCKING JAR?

OH? YOU'RE SUPERSTITIOUS THAT ONE TINY, ANT-SHIT SIZED CHANGE IN ONE SIMPLE FUNCTIONALITY WILL FUCK UP *OUR* PRODUCT?

FUCK MANAGEMENT! YOU DON'T HAVE CONFIDENCE IN YOUR *OWN* PRODUCT!

OH? CUSTOMER COMES FIRST? HAVE THE BALLS TO DEFEND YOUR OWN FUCKING SELF AND PRODUCT TO THE CLIENT OR THEY'RE GONNA MAKE YOU YOUR BITCH AND TIE A GAGBALL DIPPED IN HOT SAUCE AROUND YOUR MOUTH! HOW.. THE FUCK.. DID YOU MISS THAT LOGIC??????

Best part, they want it by tomorrow, and they don't wanna test it. Guess who's gonna get slaughtered after a week? ME! 🙂

The best/worst code comments you have ever seen?

Mine:

//Upload didn't work, have to react:
system.println('no result');

//$Message gives out a message in the compiler log.
{$Message Hint 'Feed the cat'}

//Not really needed

//Closed source - Why even comments?

//Looks like bullshit, but it has to be done this way.

//This one's really fucked up.

//If it crashes, click again.

asm JMP START end; //because no goto XP

catch {
//shit happens
}

//OMG!!! And this works???

asm
...
mov [0], 0 //uh, maybe there is a better way of throw an exception
...
mov [0], 0 //still a strange way to notify of an error

// this makes it exiting -- in other words: unstable !!!!!

//Paranoic - can't happen, but I trust no one.

else {
//please no -.-
sleep(0);
}

//wuppdi

for (int i = random(500); i < 1000 + random(500 + random(250)); i++)
{
// Do crap, so its harder to decompile
}

//This job would be great if it wasn't for the f**king customers.

//TODO: place this peace of code somewhere else...

// Beware of bugs in the code above; I have only proved it correct, not tried it.

{$IFDEF VER93}
//Good luck
{$DEFINE VER9x}
{$ENDIF}

//THIS SHIT IS LEAKING! SOMEONE FIX IT! :)

/* no comment */

Describing a friend's project to a friend:
"And then theirs a tinder like element, for filtering potential dates, but that's not implemented yet."
"Why doesn't he just copy tinder?"
"Er... wat?"
"You know, just copy their code and put it in his app."
"You don't... you can't... I mean you can decompile... but that's not useful because... it just doesn't work that way. For a million reasons. I don't know where to begin."

Am I a weirdo for using this app to see what my favorite apps code looks like

Pentesting for undisclosed company. Let's call them X as to not get us into trouble.
We are students and are doing our first pentest at an actual company instead of assignments at school. So we're very anxious. But today was a good day.
We found some servers with open ports so we checked a few of them out. I had a set of them with a bunch of open ports like ftp and... 8080. Time to check this out.
"please install flash player"... Security risk 1 found!

System seemed to be some monitoring system. Trying to log in using admin admin... Fucking works. Group loses it cause the company was being all high and mighty about being secure af. Other shit is pretty tight though.

Able to see logs, change password, add new superuser, do some searches for USERS_LOGGEDIN_TODAY! I shit you not, the system even had SUGGESTIONS for usernames to search for. One of which had something to do with sftp and auth keys. Unfortunatly every search gave a SQL syntax error. Used sniffing tools to maybe intercept message so we could do some queries of our own but nothing. Query is probably not issued from the local machine.

Tried to decompile the flash file but no luck. Only for some weird lines and a few function names I presume. But decompressing it and opening it in a text editor allowed me to see and search text. No GET or POST found. No SQL queries or name checks or anything we could think of.

That's all I could do for today. So we'll have to think of stuff for next week. We've already planned xss so maybe we can do that on this server as well.

We also found some older network printers with open telnet. Servers with a specific SQL variant with a potential exploit to execute terminal commands and some ftp and smb servers we need to check out next week.

Hella excited about this!

If you guys have any suggestions let us know. We are utter noobs when it comes to this.

Here is my day.
1. Mac wanted to perform an update.
2. I said Okay, Do it.
3. It took sometime, I thought WTF let's force reboot.
4. Shit happened. I am unable to boot as install is corrupted.
5. Reinstalled a fresh copy. I didn't have a backup.
6. Realised that my two days of work is gone since I haven't pushed the code to github.
7. Found out that I made a docker image with all of the latest changes.
8. Now trying to decompile and rewrite the code from the jar in docker image.

That moment when you decompile a project for its source code but you realize it's open source 😞

Had to track down IDA 5.0 today because I need to decompile a DOS program and DOS' included debugger wasn't cutting it. (Related note: If anyone has a copy of SOURCER, mind sharing?)

Thank fuck for the ability to decompile java .class files. Tried to use tar and overwrote the source file :0

Picking up girls

Me: We will be like C and Assembler.
Girl: Why?!
Me: Cuz I will decompile into you... ;)

<sarcasm> best advice?

Write microcontroller code in C++ even if the underlying OS won't understand. You can always decompile the program to C code and use the generated code.

Things he forgot to mention:
- cannot use most of C++ core functionality (basically no STL, no exceptions, all of C++11)
- have to get your code to compile twice (C++ and C afterwards)
- debugging that generated C code is a pain in the ass
- have to debug twice

>Weird Windows 10 glitch occurs causing text in dialogue boxes and other various things to not appear until you restart your computer.
>Is working on a program in C#
>Presses button in source control.
>Yes or no dialogue appears.
>Presses yes.
>All flies in working folder disappear.
>Restarts computer to fix visual glitch.
>All files in working folder don’t actually exist anymore.
>3 months of work nowhere to be found.
>Downloads decompiler.
>Decompiles previous versions executable file.
>Continues to work on project with decompiled code for the next 6 months.
>Gets sick of everything and painfully rewrites the entire program in NodeJS.

Moral of the story: Never gamble with Windows.

!rant, but funny
tl;dr I made something that was to protect me in case the customer doesn't pay, wanted to check if it's still there, messed up a little :D
>do an Android app project for almost 6 months
>issues with payment for it
> =.=
>firebase
>"Add new application"
>Remote Config
>add single integer variable
>back to app code
>if (integerFromFirebase != 0) navigateTo(new Fragment())
>mwahahahaha
>but they ended up paying me in the end
>huh...
>see another post on how to secure yourself if customer doesn't want to pay
>well, consider yours as more sophisticated
>hmm... wonder if they removed it
>firebaseconsole.exe
>change "enableJavaScript" (needed a legit name, so it can't be easily backtracked) to 1
>publish changes
>app still works fine
>mhhh... they removed it? really?
>can't fking believe it
>apkpure.com
>search for the app
>download apk
>unzip
>decompile dex file
>find the fragment
>can't find the code that navigates to blank fragment, but the config fetch is still there
>wtf
>look at the app
>restart it
>SHIT ITS NOT WORKING NOW XDDDDD
>changed the variable back to 0
>found out that the lambda in which I navigate to the blank fragment is in other .java file. New thing learned :v
>idk if I'm in trouble but I highly doubt it (console shows max 10 active users atm)

Was fun tho :v

!rant

Think you've mastered abstraction /seperation of what should be Android classes versus what should be Android resources?

Decompile the Gmail app and check all the xml tags you might have missed.

Remember: UI and most application properties are loaded on the xml codes first (during inflation), then on activities or fragments last (especially if the views are only instantiated).

I just realized that I need to learn a lot of tags today.

Plans:

Learn Rust and C++

Trying out the new K2 Compiler and probably ditching java for kotlin because kotlin is java

might invest in cryptocurrency

My friend almost tricked me into running an exe that deletes all your files all because he tried to decompile the js file i sent him as a joke ;-;

I spent whole day for one client in order to implement ddos protected tunnel into his java based project. In exchange he was supposed to send me his source code of one of his projects. Fucker didnt send me anything. Good that while doing migrations for him I downloaded his compiled project backup, so all I had to do was decompile his jars which had no obfuscafion whatsoever, so I managed to salvage around 95 percent of his source code. Checkmate boi.

MySejahtera is not a good appliaction at all! They just use Sqlite or Shared Preferences in the app for keeping the data local. (Just local?) As soon as you clear cache or data, The user no longer exist! Like wtf ?

So I decompile the app and review the source code, the code is not even properly obfuscated(That's why I can read it). There's a part of the code on a for loop went

```
for (int i = 3; i < array.length(); i++)
{
for (int j = 2; i > array.length() *2; j ++ )
{
onScan();
}
}
```

Which is unacceptable!

First , why nested for loops?

Second, instead of declare 'array.length()' multiple times why not declared it global for once?

No wonder the initial state of the app is buggy as hell.

How does one pull the firmware from various devices, decompile them, edit them and then place them back on the device ?

Like say, ssd firmware, or the firmware on phones etc ?

!Rant
Discovered jetBrains dotPeek today.

Wow ive decompile dll beforr but this is insanely good. I feel like i have the original sources to debug this POS lib now