Reverse Engineering Stack Exchange
Reverse Engineering Stack Exchange

Most Popular

more tags
1500 questions
18
votes
5 answers

Is there any simple open source Windows packer?

There are great questions here about different types of packers and that is very interesting to me. I would like to try my hand at reverse engineering one. Since I am very new to this, I would like the source code as well. I am hoping that by…
mikhailzhan
  • 183
  • 1
  • 5
18
votes
6 answers

In what industries is [code] reverse engineering used?

While we all know what fun reverse engineering of code can be, I am wondering what legitimate industries, besides the anti-X industry, reverse engineer code? While this may sometimes be needed in many technical roles, I am speaking more of jobs…
dyasta
  • 4,188
  • 3
  • 13
  • 17
18
votes
1 answer

Debugging with radare2 using two terminals

I have been trying to figure this out for quite some time now, and would really need some help. Firstly, some intro: I am running the newest version of radare2 from Github on a 64bit Ubuntu 16.04 and have the following sample program…
ubnix
  • 1,073
  • 7
  • 15
18
votes
4 answers

Server-side Query interception with MS SQL Server

I'm researching into intercepting queries that arrive at the SQL Server 2008 process. SQLOS architecture is divided in the following system DLLs: sqlmin.dll: Storage, replication, security features,etc. sqllang.dll: TransactSQL query execution…
Hernán
  • 283
  • 2
  • 5
18
votes
4 answers

How to generate the call graph of a binary file?

I have a non-stripped ELF binary for which I want to create a call graph as a dot file. Is there such a tool which generates the call graph? EDIT: Is there away in addition to the conventional call graph to find a call graph between libraries based…
0x90
  • 677
  • 2
  • 7
  • 19
18
votes
6 answers

What is a free & open source alternative to IDA Pro for MacOS?

I am looking for a free & open source alternative to IDA Pro runs on MacOS - the suggestions should have as close to the features of IDA as possible. I should also be able to edit an executable that I am debugging (i.e. change/remove things).
user20964
18
votes
1 answer

Approach to extract useful information from binary file

The purpose of this question is to gain an understanding of the concepts behind reverse engineering and to understand what approaches may be taken to extract useful information from a binary file. I've obtained an .hex file. Then I've converted it…
Light123
  • 195
  • 1
  • 1
  • 7
18
votes
3 answers

Automated tools for file format reverse engineering?

Are there any tools available to help automate the process of reverse engineering file formats? In particular, I'm interested in tools that use dynamic analysis of an application to parse the format, and less interested in visualization or hex…
Brendan Dolan-Gavitt
  • 2,888
  • 2
  • 19
  • 37
18
votes
2 answers

In which language is the BIOS written?

As I understand, the BIOS code/bitstream that held in the ROM should be generic (work alongside with multiple CPU types or ISAs). In addition, I saw mentions in the web that claim to have the possibility to dump it's code (and to 'disassemble'…
Reflection
  • 403
  • 4
  • 7
17
votes
2 answers

"Raw" offsets to "disassembler" offsets?

This is a very silly question, but surprisingly I've had a problem with this today. In a hex editor, I've found an offset and I wanted to take a look at that code in a disassembler. In the hex-editor, the offset is EBE75, and it looks like…
user4520
  • 595
  • 8
  • 21
17
votes
4 answers

What are the essential IDA Plugins or IDA Python scripts that you use?

I'm a bit of a novice with IDA Pro, and have been discovering some of the excellent plugins available from the RE community as well as its vendors. My small list of plugins that I have found extremely valuable to me are: Hex-Rays Decompiler…
Mick
  • 7,562
  • 3
  • 26
  • 40
17
votes
4 answers

Obfuscating JavaScript with zero-width characters - pros and cons?

This comes from comments on a question on StackOverflow about JavaScript Variables: Why aren't ◎ܫ◎ and ☺ valid JavaScript variable names? JavaScript accepts zero-width characters as valid variable names, for example all three of these variables have…
James Donnelly
  • 273
  • 2
  • 9
17
votes
3 answers

Parsing/Rescuing corrupted IDA database

I'm reversing an application with IDA. My VM crashed and left the IDA database in a corrupted unpacked state. The next time I tried to load it back, IDA gave me the following error message: The input database is corrupted: CRC32 mistmatch.…
Dominik Antal
  • 2,038
  • 22
  • 39
17
votes
2 answers

Intercepting GSM communications with an USRP and Gnu Radio

I would like to know what is needed to intercept GSM communications with an USRP (Universal Software Radio Peripheral) and using Gnu Radio. Is there tutorial about that ? What type of USRP is recommended ? Where to find technical documentation…
perror
  • 19,083
  • 29
  • 87
  • 150
17
votes
1 answer

COM interface methods

I'm reversing malware and it uses COM, which I evidently don't know. My question is how to find out what method is called using ppv (and objectstublessclient?) push offset ppv ; Address of pointer variable that receives the interface pointer…
astrophonic
  • 173
  • 1
  • 5
1 2 3
…
99 100