Reverse Engineering Stack Exchange is a question and answer site for researchers and developers who explore the principles of a system through analysis of its structure, function, and operation. It only takes a minute to sign up.

Sign up to join this community
Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top

Top Questions

0 votes
1 answer
23 views

What does the code do?

1 vote
1 answer
15 views

Mov instruction from a pointed location at the beginning of a program

1 vote
1 answer
1k views

Suspicious obfuscated JavaScript file

2 votes
2 answers
2k views

How to reverse engineer an exe built using nexe?

0 votes
2 answers
39 views

What techniques are there for mapping code in IDA Pro to the same code in Ghidra, or vice versa?

0 votes
0 answers
16 views

Trace java calls from a native library using frida

0 votes
1 answer
487 views

How to fix an extracted dyld from dyld_shared_cache_x86_64?

0 votes
0 answers
20 views

How do I align a memory dump hex file so that a pointer address matches its location in the memory dump file?

2 votes
0 answers
47 views

Load to Ida binary with all of SO

0 votes
0 answers
13 views

How do I reverse engineer an Electron compiled file?- a JSC Bytenode file

0 votes
1 answer
34 views

How can I use cutter like ida, trying to search by address

0 votes
0 answers
53 views

Tenda router + Firmware-Mod-kit = Firmware header not supported

1 vote
1 answer
259 views

Breakpoint on memory access in ARM debugging

1 vote
1 answer
93 views

help with Ghidra and rewriting assembly

1 vote
1 answer
793 views

Router flash dump unknown filesystem

2 votes
1 answer
315 views

Can somebody explain this weird alignment/optimisation done when zeroing out a buffer?

4 votes
1 answer
204 views

Reverse engineer compressed iOS app file

0 votes
0 answers
35 views

How to fix CRC32 checksum in an xz-compressed folder without corrupting the data?

0 votes
0 answers
184 views

PPPoE username and password from ZTE ZXHN F680 V6

4 votes
1 answer
966 views

Windows 10 v.1803 boot failure after trying to install network kernel debugging with WinDbg Preview

0 votes
0 answers
18 views

How can I set a breakpont before the software exits in Dnspy?

0 votes
0 answers
11 views

Calling a function with a variable number of args from a proxy DLL

1 vote
1 answer
39 views

Understanding disassembly information from Visual Studio's dumpbin and GNU's objdump

0 votes
1 answer
113 views

How do I find a function and find out what it does using reverse engineering?

4 votes
2 answers
17k views

Why my Resource Hacker doesn't work with some .EXE files

0 votes
1 answer
54 views

ASUS RP-AC51 UART doesn't work with any common baud rate

-1 votes
1 answer
89 views

How to call and what means: _DWORD *__thiscall

0 votes
1 answer
89 views

Changing the jne to je instruction causes program to generate error

0 votes
1 answer
121 views

How to reverse engineer structs in radare2?

-1 votes
0 answers
244 views

What does this lowlevel function do?

1 vote
1 answer
196 views

Determine if exe is written using Java

0 votes
0 answers
36 views

Unable to redirect program because function address is not correctly written to the heap

2 votes
2 answers
143 views

Changing value of parameter with gdb

1 vote
0 answers
24 views

How to convert addresses shown by IDA when statically analyzing a DLL to real addresses in runtime

0 votes
1 answer
66 views

Frida hook multiple processes

3 votes
1 answer
714 views

Why is ASLR not activated though IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE is set?

2 votes
1 answer
177 views

How i can do several input via rarun2?

0 votes
1 answer
43 views

Is iOS 15 kernel cache encrypted?

0 votes
0 answers
33 views

Is there any problematic difference in Intel and AMD processors for reverse engineering?

1 vote
1 answer
51 views

Calling function with string as parameter

0 votes
0 answers
22 views

Decrypting Android game using cocos2dx-lua [closed]

0 votes
1 answer
120 views

How can I find a value in Tricore(TC1766) Arch?

0 votes
1 answer
49 views

Find the first function that sets the value currently stored in a given register

2 votes
2 answers
2k views

How to unpack the Fortigate firmware?

0 votes
2 answers
172 views

Load Library Android

2 votes
1 answer
60 views

How can I make Ghidra have access to external libraries?

11 votes
2 answers
3k views

Encrypted Mach-o binary cannot be disassembled/traced with GDB

0 votes
0 answers
22 views

Restore debug symbol for a embedded .bin image with an .axf file


Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.