tag:blogger.com,1999:blog-31571948.post8153828816778079973..comments2010-03-29T01:07:01.589+02:00Raul Sileshttp://www.blogger.com/profile/15605985650569727525noreply@blogger.comBlogger4125tag:blogger.com,1999:blog-31571948.post-29016673759013034922010-03-29T01:07:01.571+02:002010-03-29T01:07:01.571+02:00Alvaro,<br />The book has a practical approach, however it does not come with an enclosed set of binaries used throughout the book; it is not a training class :(<br /><br />In order to get the most out of it, I recommend you to play with any binary you have around when reading the book, or more specifically, use the binaries published by reverse engineering challenges, such as those from the Honeynet Project, the Internet Storm Center or many others, such as [1].<br /><br />[1] http://www.malwarechallenge.infoRaul Sileshttp://www.blogger.com/profile/15605985650569727525noreply@blogger.comtag:blogger.com,1999:blog-31571948.post-28065900665706186242010-03-29T00:50:18.674+02:002010-03-29T00:50:18.674+02:00Jose,<br />I think the book is useful for people using IDA Freeware too, although it clearly targets the commercial version of IDA Pro. In particular, the book was written for IDA version 5.2 (current version is 5.6 [2]).<br /><br />Users of IDA Freeware [1] (which BTW is version 4.9 and only supports x86 code) won&#39;t be able to use all the new features introduced in IDA Pro 5.x (scripting, SDK, graph view for the disassembly navigator, extra number of plug-ins, IDC scripts and libraries, FLAIR tools, remote debugging, etc), therefore, can&#39;t make use of the chapters covering these more advanced features, such as FLIRT signatures (chapter 12), the IDA SDK (chapter 16) or IDA plug-ins (chapter 17). <br /><br />[1] http://www.hex-rays.com/idapro/idadownfreeware.htm<br />[2] http://www.hex-rays.com/idapro/idadowndemo.htm<br /><br />However, it is true that getting access to all the details about these advanced capabilities from the book really helps to make a more thorough evaluation regarding the acquisition of the commercial version (or not).Raul Sileshttp://www.blogger.com/profile/15605985650569727525noreply@blogger.comtag:blogger.com,1999:blog-31571948.post-82364456528438663532010-03-28T19:59:09.643+02:002010-03-28T19:59:09.643+02:00Hi!<br /><br />Nice review! Im considering seriously buying it as I was looking for something like that to enter the reverse engineering world :D. Does it come with examples and challenges to get into the full capabilities of the tool or is more a theorical approach?<br /><br />Thanks <br /><br />AlvaroPicapauhttp://www.blogger.com/profile/08813569635587155359noreply@blogger.comtag:blogger.com,1999:blog-31571948.post-90348016233390641622010-03-28T11:36:31.878+02:002010-03-28T11:36:31.878+02:00Hi Raul, do you think this book is also useful for people using IDA Pro Free? Is it mainly focused on IDA Pro 5.x and their new features?<br /><br />I think there are a lot of people that is using IDA Pro Free because they&#39;re using it at home, not daily at work, so they can&#39;t pay any license. Do you also recommend this book for them?<br /><br />Great post! Thanks!Jose Selvihttp://www.blogger.com/profile/04036140005963821122noreply@blogger.com