Guy's 30 Reverse Engineering Tips & Tricks

-
Good morning lovely people!

During April I challenged myself to tweet 1 reverse engineering tip every day. For your viewing pleasure, here I aggregated all 30 tips.

Be sure to follow me @whtaguy for my latest tweets and more reverse engineering extravaganza.
Leave a comment on this post or tag me on Twitter - I reply pretty quickly :)

If the tweets aren't displayed properly (for example if there are no pictures), temporarily turn off tracker protection, which blocks loading the required resources from twitter

Tips & Tricks

  • Tip 1

  • Tip 2

  • Tip 3

  • Tip 4

  • Tip 5

  • Tip 6

  • Tip 7

  • Tip 8

  • Tip 9

  • Tip 10

  • Tip 11

  • Tip 12

  • Tip 13

  • Tip 14

  • Tip 15

  • Tip 16

  • Tip 17

  • Tip 18

  • Tip 19

  • Tip 20

  • Tip 21

  • Tip 22

  • Tip 23

  • Tip 24

  • Tip 25

  • Tip 26

  • Tip 27

  • Tip 28

  • Tip 29

  • Tip 30

Be sure to follow me @whtaguy for my latest tweets and more reverse engineering extravaganza.
Leave a comment on this post or tag me on Twitter - I reply pretty quickly :)

Comments

Post a Comment

Popular posts from this blog

uTorrent CVE-2020-8437 Vulnerability And Exploit Overview

-
Image
The world’s most popular torrent client, uTorrent, contained a security vulnerability — later to be called CVE-2020-8437— that could be exploited by a remote attacker to crash and corrupt any uTorrent instance connected to the internet. As white-hat hackers, my friend (who wishes to remain anonymous) and I reported this vulnerability as soon as we found it and it was quickly fixed. Now, after ample time has been given for users to update, it’s safe to disclose an overview of the vulnerability and how to exploit it. Torrent Protocol - What You Need To Know Torrent downloads utilize simultaneous connections to multiple peers (other people downloading the same file), creating a decentralized download network that benefits the collective peer group. Each peer can upload and download data to and from any other peer, eliminating any single point of failure or bandwidth bottleneck, resulting in a faster and more stable download for all peers. Peers communicate with each other using the BitTor
Read more

Calling Arbitrary Functions In EXEs: Performing Calls to EXE Functions Like DLL Exports

-
Image
 Motivation When reversing or fuzzing an executable, being able to run an arbitrary function with controlled data is extremely helpful. Through iteratively playing with the function's parameters and examining the output, we can better understand the function's logic. Background A dll (Dynamic Linked Library) with our target function would allow us to conveniently review and test the function as we wish. The only problem is that usually the function we want to examine resides in an exe, not a dll. Converting¹ an exe to a dll is a solvable challenge. After all, both an exe and a dll share the same PE (Portable Executable) file format .  So let's explore, how can we convert¹ an exe to a dll? Spoiler: there are a few more steps than just changing the extension 😉 ¹ "convert to DLL" = fundamentally behave like a DLL. I'll use this exe created from the following code and target the decode_string function for demonstration purposes throughout this post.
Read more