Guy's 30 Reverse Engineering Tips & Tricks

-
Good morning lovely people!

During April I challenged myself to tweet 1 reverse engineering tip every day. For your viewing pleasure, here I aggregated all 30 tips.

Be sure to follow me @whtaguy for my latest tweets and more reverse engineering extravaganza.
Leave a comment on this post or tag me on Twitter - I reply pretty quickly :)

If the tweets aren't displayed properly (for example if there are no pictures), temporarily turn off tracker protection, which blocks loading the required resources from twitter

Tips & Tricks

  • Tip 1

  • Tip 2

  • Tip 3

  • Tip 4

  • Tip 5

  • Tip 6

  • Tip 7

  • Tip 8

  • Tip 9

  • Tip 10

  • Tip 11

  • Tip 12

  • Tip 13

  • Tip 14

  • Tip 15

  • Tip 16

  • Tip 17

  • Tip 18

  • Tip 19

  • Tip 20

  • Tip 21

  • Tip 22

  • Tip 23

  • Tip 24

  • Tip 25

  • Tip 26

  • Tip 27

  • Tip 28

  • Tip 29

  • Tip 30

Be sure to follow me @whtaguy for my latest tweets and more reverse engineering extravaganza.
Leave a comment on this post or tag me on Twitter - I reply pretty quickly :)

Comments

Post a Comment

Popular posts from this blog

uTorrent CVE-2020-8437 Vulnerability And Exploit Overview

-
Image
The world’s most popular torrent client, uTorrent, contained a security vulnerability — later to be called CVE-2020-8437— that could be exploited by a remote attacker to crash and corrupt any uTorrent instance connected to the internet. As white-hat hackers, my friend (who wishes to remain anonymous) and I reported this vulnerability as soon as we found it and it was quickly fixed. Now, after ample time has been given for users to update, it’s safe to disclose an overview of the vulnerability and how to exploit it. Torrent Protocol - What You Need To Know Torrent downloads utilize simultaneous connections to multiple peers (other people downloading the same file), creating a decentralized download network that benefits the collective peer group. Each peer can upload and download data to and from any other peer, eliminating any single point of failure or bandwidth bottleneck, resulting in a faster and more stable download for all peers. Peers communicate with each other using the BitTor
Read more

D-Link Router CVE-2021-27342 Timing Side-Channel Attack Vulnerability Writeup

-
Image
I recently bought a new DIR-842 home router, and immediately (as any hacker would) started toying with it - I can’t call it mine until I pop a shell on it. Rather quickly I found I can enable telnet through the admin web gui, and then connect to telnet with an admin user. But that was too easy, so let’s see if we can find a bug/vulnerability. easy work getting a shell I continued looking for a bug in the router’s telnet implementation because it’s an attractive target: it’s remotely accessible, and as learned by previously connecting as system admin, it runs with high privileges. Also, instead of searching for a memory corruption vulnerability, I focused on finding a more easily exploitable logic vulnerability. CVE-2021-27342 Brute Force Protection Bypass The router’s telnet authentication is protected with an anti-brute force mechanism that limits an attacker’s password guessing speed by delaying the “access denied” response of failed logins. However, this protection’s implementation
Read more