Hottest Questions Today

0 votes

1 answer

32 views

What does the code do?

disassembly

sudhackar

2,345

modified 8 hours ago

1 vote

1 answer

22 views

Mov instruction from a pointed location at the beginning of a program

S R Maiti

123

modified 6 hours ago

1 vote

0 answers

16 views

+50

How do I reverse engineer an Electron compiled file?- a JSC Bytenode file

ghidra deobfuscation decompile unknown-data

MendelG

63

modified 1 hour ago

0 votes

2 answers

44 views

What techniques are there for mapping code in IDA Pro to the same code in Ghidra, or vice versa?

ida ghidra

Paul

125

modified yesterday

0 votes

0 answers

17 views

Trace java calls from a native library using frida

android java frida

Shayan Vahabnezhad

1

asked yesterday

1 vote

0 answers

22 views

How do I align a memory dump hex file so that a pointer address matches its location in the memory dump file?

memory hex buffer-overflow memory-dump

ChickenOverlord

111

asked 2 days ago

0 votes

1 answer

34 views

How can I use cutter like ida, trying to search by address

ida radare2 address

sudhackar

2,345

answered 2 days ago

2 votes

0 answers

49 views

Load to Ida binary with all of SO

ida linux ida-plugin shared-object

Kokomelom

51

modified 2 days ago

1 vote

1 answer

93 views

help with Ghidra and rewriting assembly

assembly ghidra

sudhackar

2,345

modified 2 days ago

0 votes

0 answers

36 views

How to fix CRC32 checksum in an xz-compressed folder without corrupting the data?

crc checksum

SGJ

1

modified May 21 at 19:56

1 vote

1 answer

39 views

Understanding disassembly information from Visual Studio's dumpbin and GNU's objdump

disassembly windows assembly objdump

0xC0000022L♦

10.5k

modified May 20 at 10:03

-1 votes

1 answer

89 views

How to call and what means: _DWORD *__thiscall

ida c++ game-hacking calling-conventions

kuhi

31

answered May 19 at 1:36

0 votes

0 answers

55 views

Tenda router + Firmware-Mod-kit = Firmware header not supported

firmware crc firmware-analysis checksum

0xC0000022L♦

10.5k

modified 2 days ago

-1 votes

0 answers

244 views

What does this lowlevel function do?

ida disassembly memory hash-functions

Igor Skochinsky♦

34.6k

modified May 18 at 13:24

0 votes

0 answers

11 views

Calling a function with a variable number of args from a proxy DLL

windows dll functions

mindoverflow

129

asked May 20 at 20:24

1 vote

1 answer

51 views

Calling function with string as parameter

c++ x64dbg game-hacking calling-conventions

kuhi

31

answered May 16 at 14:12

1 vote

0 answers

24 views

How to convert addresses shown by IDA when statically analyzing a DLL to real addresses in runtime

ida windows dll pointer msvc

Curious User

11

modified May 17 at 11:02

0 votes

1 answer

43 views

Is iOS 15 kernel cache encrypted?

ios kernel

user22363

313

answered May 16 at 23:38

0 votes

0 answers

33 views

Is there any problematic difference in Intel and AMD processors for reverse engineering?

intel amd64

Katoptriss

11

modified May 16 at 15:06

0 votes

1 answer

49 views

Find the first function that sets the value currently stored in a given register

x64dbg dynamic-analysis

haxerl

121

answered May 15 at 10:42

2 votes

1 answer

60 views

How can I make Ghidra have access to external libraries?

x86 ghidra

BadSugar

78

answered May 14 at 21:01

0 votes

0 answers

22 views

Decrypting Android game using cocos2dx-lua [closed]

binary-analysis decompilation decryption

user41089

1

asked May 16 at 11:49

0 votes

0 answers

47 views

Can't get Visual C++ to generate the same code give by Ghidra

c++ ghidra register

user3900456

101

asked May 13 at 15:50

0 votes

1 answer

65 views

Deobfuscator and decompiler for .NET [closed]

decompilation deobfuscation

y_v

76

answered May 12 at 2:38

-1 votes

0 answers

29 views

ida pro overwrite bytes not increase rom location (Value)

ida idapro-sdk ida-plugin

Jitu Chauhan

1

asked May 13 at 11:11

1 vote

1 answer

39 views

How to define an xmmword variable in IDA?

ida

KulaGGin

206

modified May 13 at 17:42

0 votes

0 answers

22 views

Restore debug symbol for a embedded .bin image with an .axf file

ida embedded binary-format debugging-symbols

Jimmy.D

3

modified May 13 at 23:23

1 vote

0 answers

43 views

Reverse engineer CRC Canbus

crc

sudhackar

2,345

modified May 12 at 9:58

0 votes

0 answers

28 views

How can IDA Pro disassemble paged memory from HCS12 processort?

ida

HeckMeck

11

asked May 12 at 6:13

0 votes

0 answers

186 views

PPPoE username and password from ZTE ZXHN F680 V6

firmware router

IGPROD

1

modified May 21 at 17:34

0 votes

1 answer

54 views

How to reference an address set by 2 instructions in Ghidra

decompilation ghidra address offset

goatshriek

56

answered May 9 at 22:03

1 vote

0 answers

55 views

Implementing syscalls under Miasm

python x86-64 emulation system-call

Katoptriss

11

modified May 10 at 13:10

0 votes

1 answer

25 views

Interpreting Response for Modbus/TCP function code 0x08 Diagnostics

networking

Max

26

answered May 11 at 13:16

0 votes

1 answer

55 views

x64dbg: is there a way to save the complete disassembly of a module to a text file?

disassembly x64dbg

user22363

313

answered May 12 at 0:16

1 vote

2 answers

70 views

What is the best approach to reverse a custom TCP Application Layer?

hex protocol networking wireshark

Olivier Lasne

111

answered May 13 at 17:18

1 vote

0 answers

27 views

In IDA is there a way to load the PE headers after the initial loading?

ida pe

0xC0000022L♦

10.5k

asked May 11 at 13:43

0 votes

1 answer

66 views

Frida hook multiple processes

windows python frida

BadSugar

78

modified May 17 at 10:41

0 votes

0 answers

46 views

Password encryption when transferring from master to PLC

encryption protocol wireshark

Pigeoncatcher

101

modified May 11 at 10:01

0 votes

0 answers

90 views

Basic buffer-overflow on a remote program with Python/pwntools

ghidra elf python buffer-overflow pwntools

Dvd848

459

modified May 6 at 14:33

1 vote

0 answers

24 views

How to search for String/Byte pattern in memory within a WinDBG Time Travel Debugging trace?

windbg

programmerskitchen

13

asked May 10 at 9:23

1 vote

1 answer

54 views

How to load a PDB file into x64dbg?

windows x64dbg symbols debugging-symbols pdb

Paweł Łukasik

4,512

answered May 7 at 6:26

1 vote

1 answer

108 views

Strange DWORD/QWORD C++ Strings in decompilation

c++ ghidra strings

antonone

136

answered May 5 at 8:04

1 vote

1 answer

100 views

x86 - How do I detect virtualized code by looking at the assembly?

ida x86 obfuscation virtualizers vmprotect

Rolf Rolles

7,814

answered May 2 at 5:32

0 votes

0 answers

21 views

iOS unknown library sending ssl pinned request

ios frida openssl

hmngwn

1

modified May 8 at 12:58

0 votes

1 answer

51 views

Floating point number mangled in a proprietary file

file-format float

Rolf Rolles

7,814

answered May 5 at 6:15

0 votes

0 answers

13 views

How are system page map entries belonging to process's updated?

windows virtual-memory

Real Name

1

asked May 10 at 6:10

1 vote

1 answer

73 views

Exporting dll out of a process memory

dll memory-dump

Igor Skochinsky♦

34.6k

answered May 2 at 20:00

0 votes

0 answers

22 views

How does `bne` know which bit field in the condition register to branch on? (PowerPC Gekko)

powerpc

Wadwamille

1

asked May 6 at 20:12

Top Questions

Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.