Reverse Engineering Stack Exchange is a question and answer site for researchers and developers who explore the principles of a system through analysis of its structure, function, and operation. It only takes a minute to sign up.

Sign up to join this community
Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top

Top Questions

0 votes
0 answers
20 views

Hexrays - Enhance decompilation of "pre-multiplied" array indices?

0 votes
0 answers
25 views

Is game hacking all about memory manipulation?

0 votes
0 answers
14 views

Extracting pwsafe.key from memory dump

0 votes
0 answers
20 views

Microchip ATSAME70Q21-CN unable to connect with JTAG or SWD

0 votes
2 answers
46 views

How to make a plugin python function available to IDA's console?

1 vote
0 answers
107 views

Analyse a statically linked binary and extract syscall from it using angr

0 votes
1 answer
44 views

.NET Packer/Protector

2 votes
0 answers
31 views

Extracting Audio from a Game

1 vote
0 answers
36 views

How does Play integrity api assures Genuine app binary

1 vote
0 answers
37 views

Frida: how to hook a synthetic class

0 votes
0 answers
27 views

decode lua files cocos2dx and protected from Frida and IDA64 for hooking

0 votes
0 answers
24 views

Scylla error on FThunk import (manually unpacking UPX)

0 votes
1 answer
42 views

Function return in machine code (by platform/compiler)

0 votes
0 answers
35 views

Address arithmetic in Ida Pro

1 vote
0 answers
27 views

UTC Timestamp since 1900

0 votes
1 answer
43 views

When parsing a C header file in IDA, is there a preprocessor symbol I can use to detect it?

1 vote
0 answers
20 views

Keycode from a serial PDA keyboard (iPAQ G750)

1 vote
2 answers
70 views

reversing pyinstaller compiled exe

0 votes
0 answers
23 views

radare2 on an architecture with custom instructions

0 votes
0 answers
53 views

Import function symbols from a reflection system into IDA

1 vote
1 answer
85 views

Unix system with windows-style registry

0 votes
0 answers
32 views

How can I create a radare2 type for a variable-length struct?

0 votes
1 answer
151 views

How to extract ucas and utoc io store container files in unreal engine 5

0 votes
1 answer
105 views

Is DOS Assembly Hexadecimal Different To Modern Hex Editor Hexadecimal?

2 votes
0 answers
59 views

What is the gdb command equivalent of bp MODULE_NAME+0x12345678 in WinDBG?

1 vote
0 answers
44 views

Strings disappearing from dumped Frida module

0 votes
1 answer
125 views

How do I deobfuscate this JavaScript? [closed]

2 votes
1 answer
142 views

convert a memory location to string in Ghidra

1 vote
0 answers
54 views

How to use IDA environment to run python scripts?

1 vote
1 answer
84 views

Strange entry point for an old Mac OS X x86 32 bit binary

1 vote
1 answer
35 views

Chip identification in nonin module

1 vote
1 answer
63 views

IDC script offsets

0 votes
0 answers
59 views

Why ghidra does not use label variables and uses constants to represent code local variables?

0 votes
0 answers
39 views

Reverse Engineering A RS-485 Steam Shower Protocol

0 votes
0 answers
59 views

ARM64 Stack Layout - Why 100x'A' Doesn't Crash?

0 votes
1 answer
50 views

My ida.reg file got deleted, is there any way to restore ida?

0 votes
1 answer
77 views

Mnemonic suffixes for x86-64 assembly for AT&T syntax

3 votes
1 answer
43 views

JEB Community Edition - Difference between Script vs Plugin?

0 votes
0 answers
37 views

Windows boot sequence operation

1 vote
1 answer
67 views

Anyone here capable of removing a launch condition from an old Win32 file having a "Sony InstallLock"?

0 votes
0 answers
33 views

Help on identifying encryption/encoding scheme

0 votes
1 answer
72 views

Cracking cryptographic function with radare2

0 votes
0 answers
44 views

IDA Free Debugger slows down app substantially

0 votes
0 answers
19 views

DesignAKnit shape (.shp) file format

1 vote
0 answers
54 views

How can I make IDA disassemble in NASM-like syntax instead of MASM-like syntax?

0 votes
0 answers
23 views

how to set flag in windbg

0 votes
1 answer
44 views

GWT: Deserialize objects sent/received via websocket

0 votes
0 answers
32 views

Audio problem rushing?


Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.