6

I am learning reverse engineering, and would like a way to try out methods I'm learning.

In web security, the way to try out and learn methods is a thing called DVWA. It is an insecure web app made for web security people to exploit.

Is there something like this for reverse engineering?

anonmous
  • 63
  • 2

1 Answers1

6

You can try your hand at analyzing programs which are used to introduce reverse engineering concepts in academia such the binaries available for download at RPI's "Modern Binary Exploitation" course page at http://security.cs.rpi.edu/courses/binexp-spring2015/ in the sections titled "Tools and Basic Reverse Engineering", "Extended Reverse Engineering" and "Reverse Engineering Lab". I believe the 11 or so crackmes included in the challenges.zip file are similar to the IOLI crackme files, for which there are many tutorials available.

One of the binaries in the bombs.zip file is called "cmubomb" which is Carnegie Mellon University's binary bomb, also available at their student lab site http://csapp.cs.cmu.edu/2e/labs.html, for which there are also many tutorials across the web.

NYU also has some reverse engineering "challenge applications" to analyze at https://github.com/isislab/Hack-Night#workshop-materials-5.

Note: The binaries from the aforementioned sources are Linux ELF 32-bit executables. Almost all are unstripped. If you would like to analyze Windows binaries, you can get Win32 versions of the IOLI crackmes from https://github.com/radare/radare2book/tree/master/crackmes/ioli. The IOLI-crackme.tar.gz file available for download there contains 10 Windows PE32 executable files.

Update: The CMU labs, including the binary bomb, now require an Instructor account to download.

julian
  • 7,128
  • 3
  • 22
  • 55
  • if crackmes.de is ever back up you can check the crackmes available there, as well – julian Dec 14 '16 at 23:17
  • I looked up crackmes.de, and found these. https://tuts4you.com/download.php?list.61 Of course, download with caution. Password are "tuts4you" – anonmous Dec 14 '16 at 23:30
  • you can also look at https://www.root-me.org/en/Challenges/Cracking/, as well as http://www.wechall.net/index.php/?mo=WeChall&me=Challs and https://challenges.re/ – julian Dec 14 '16 at 23:36
  • There was full zip of binaries of the erstwhile reverse engineering academy by dr thorsten schneider along with an iso of damn vulnerable linux http://www.codebreakers-journal.com/ which you may check out – blabb Dec 15 '16 at 07:32
  • +1 for the l5 CGME, !! – Jay Aug 16 '19 at 07:30