Reverse Engineering Stack Exchange is a question and answer site for researchers and developers who explore the principles of a system through analysis of its structure, function, and operation. It only takes a minute to sign up.

Sign up to join this community
Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top

Top Questions

0 votes
1 answer
32 views

What does the code do?

1 vote
1 answer
22 views

Mov instruction from a pointed location at the beginning of a program

1 vote
0 answers
16 views
+50

How do I reverse engineer an Electron compiled file?- a JSC Bytenode file

0 votes
2 answers
44 views

What techniques are there for mapping code in IDA Pro to the same code in Ghidra, or vice versa?

0 votes
0 answers
17 views

Trace java calls from a native library using frida

1 vote
0 answers
22 views

How do I align a memory dump hex file so that a pointer address matches its location in the memory dump file?

0 votes
1 answer
34 views

How can I use cutter like ida, trying to search by address

2 votes
0 answers
49 views

Load to Ida binary with all of SO

1 vote
1 answer
93 views

help with Ghidra and rewriting assembly

0 votes
0 answers
36 views

How to fix CRC32 checksum in an xz-compressed folder without corrupting the data?

1 vote
1 answer
39 views

Understanding disassembly information from Visual Studio's dumpbin and GNU's objdump

-1 votes
1 answer
89 views

How to call and what means: _DWORD *__thiscall

0 votes
0 answers
55 views

Tenda router + Firmware-Mod-kit = Firmware header not supported

-1 votes
0 answers
244 views

What does this lowlevel function do?

0 votes
0 answers
11 views

Calling a function with a variable number of args from a proxy DLL

1 vote
1 answer
51 views

Calling function with string as parameter

1 vote
0 answers
24 views

How to convert addresses shown by IDA when statically analyzing a DLL to real addresses in runtime

0 votes
1 answer
43 views

Is iOS 15 kernel cache encrypted?

0 votes
0 answers
33 views

Is there any problematic difference in Intel and AMD processors for reverse engineering?

0 votes
1 answer
49 views

Find the first function that sets the value currently stored in a given register

2 votes
1 answer
60 views

How can I make Ghidra have access to external libraries?

0 votes
0 answers
22 views

Decrypting Android game using cocos2dx-lua [closed]

0 votes
0 answers
47 views

Can't get Visual C++ to generate the same code give by Ghidra

0 votes
1 answer
65 views

Deobfuscator and decompiler for .NET [closed]

-1 votes
0 answers
29 views

ida pro overwrite bytes not increase rom location (Value)

1 vote
1 answer
39 views

How to define an xmmword variable in IDA?

0 votes
0 answers
22 views

Restore debug symbol for a embedded .bin image with an .axf file

1 vote
0 answers
43 views

Reverse engineer CRC Canbus

0 votes
0 answers
28 views

How can IDA Pro disassemble paged memory from HCS12 processort?

0 votes
0 answers
186 views

PPPoE username and password from ZTE ZXHN F680 V6

0 votes
1 answer
54 views

How to reference an address set by 2 instructions in Ghidra

1 vote
0 answers
55 views

Implementing syscalls under Miasm

0 votes
1 answer
25 views

Interpreting Response for Modbus/TCP function code 0x08 Diagnostics

0 votes
1 answer
55 views

x64dbg: is there a way to save the complete disassembly of a module to a text file?

1 vote
2 answers
70 views

What is the best approach to reverse a custom TCP Application Layer?

1 vote
0 answers
27 views

In IDA is there a way to load the PE headers after the initial loading?

0 votes
1 answer
66 views

Frida hook multiple processes

0 votes
0 answers
46 views

Password encryption when transferring from master to PLC

0 votes
0 answers
90 views

Basic buffer-overflow on a remote program with Python/pwntools

1 vote
0 answers
24 views

How to search for String/Byte pattern in memory within a WinDBG Time Travel Debugging trace?

1 vote
1 answer
54 views

How to load a PDB file into x64dbg?

1 vote
1 answer
108 views

Strange DWORD/QWORD C++ Strings in decompilation

1 vote
1 answer
100 views

x86 - How do I detect virtualized code by looking at the assembly?

0 votes
0 answers
21 views

iOS unknown library sending ssl pinned request

0 votes
1 answer
51 views

Floating point number mangled in a proprietary file

0 votes
0 answers
13 views

How are system page map entries belonging to process's updated?

1 vote
1 answer
73 views

Exporting dll out of a process memory

0 votes
0 answers
22 views

How does `bne` know which bit field in the condition register to branch on? (PowerPC Gekko)


Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.