Hottest Questions Today

0 votes

0 answers

20 views

Hexrays - Enhance decompilation of "pre-multiplied" array indices?

Ray

1,083

asked yesterday

0 votes

0 answers

25 views

Is game hacking all about memory manipulation?

Mahdi

1

asked yesterday

0 votes

0 answers

14 views

Extracting pwsafe.key from memory dump

Scott John Monk

1

asked yesterday

0 votes

0 answers

20 views

Microchip ATSAME70Q21-CN unable to connect with JTAG or SWD

kumaichi

1

asked 2 days ago

0 votes

2 answers

46 views

How to make a plugin python function available to IDA's console?

Rolf Rolles

9,178

answered Nov 28 at 16:46

1 vote

0 answers

107 views

Analyse a statically linked binary and extract syscall from it using angr

0x4E4F4F42

11

modified 2 days ago

0 votes

1 answer

44 views

.NET Packer/Protector

Ryuk

1

modified yesterday

2 votes

0 answers

31 views

Extracting Audio from a Game

Samlaptop

21

asked Nov 27 at 17:09

1 vote

0 answers

36 views

How does Play integrity api assures Genuine app binary

user45316

11

asked Nov 27 at 12:06

1 vote

0 answers

37 views

Frida: how to hook a synthetic class

Sven Onderbeke

21

modified Nov 26 at 16:54

0 votes

0 answers

27 views

decode lua files cocos2dx and protected from Frida and IDA64 for hooking

xbuyk987

53

asked Nov 26 at 20:22

0 votes

0 answers

24 views

Scylla error on FThunk import (manually unpacking UPX)

Ryuk

1

modified Nov 26 at 12:58

0 votes

1 answer

42 views

Function return in machine code (by platform/compiler)

w s

8,388

answered Nov 25 at 16:36

0 votes

0 answers

35 views

Address arithmetic in Ida Pro

Robert

917

modified Nov 25 at 16:16

1 vote

0 answers

27 views

UTC Timestamp since 1900

Philippe Proost

23

asked Nov 24 at 8:45

0 votes

1 answer

43 views

When parsing a C header file in IDA, is there a preprocessor symbol I can use to detect it?

Igor Skochinsky♦

36.4k

answered 15 hours ago

1 vote

0 answers

20 views

Keycode from a serial PDA keyboard (iPAQ G750)

Xinming Chen

11

asked Nov 23 at 19:07

1 vote

2 answers

70 views

reversing pyinstaller compiled exe

Yotamz

882

answered Nov 22 at 8:53

0 votes

0 answers

23 views

radare2 on an architecture with custom instructions

confusedandsad

1

asked Nov 22 at 14:00

0 votes

0 answers

53 views

Import function symbols from a reflection system into IDA

KulaGGin

296

modified Nov 20 at 17:28

1 vote

1 answer

85 views

Unix system with windows-style registry

w s

8,388

modified Nov 18 at 20:53

0 votes

0 answers

32 views

How can I create a radare2 type for a variable-length struct?

Evan Carroll

1,769

modified Nov 19 at 8:06

0 votes

1 answer

151 views

How to extract ucas and utoc io store container files in unreal engine 5

KulaGGin

296

answered Nov 25 at 16:41

0 votes

1 answer

105 views

Is DOS Assembly Hexadecimal Different To Modern Hex Editor Hexadecimal?

CommunityBot

1

modified Nov 29 at 8:01

2 votes

0 answers

59 views

What is the gdb command equivalent of bp MODULE_NAME+0x12345678 in WinDBG?

Rohit Gupta

257

modified Nov 15 at 12:57

1 vote

0 answers

44 views

Strings disappearing from dumped Frida module

hmngwn

61

asked Nov 14 at 20:02

0 votes

1 answer

125 views

How do I deobfuscate this JavaScript? [closed]

ESkri

183

modified Nov 13 at 20:11

2 votes

1 answer

142 views

convert a memory location to string in Ghidra

Alexey Esaulenko

158

modified Nov 13 at 6:57

1 vote

0 answers

54 views

How to use IDA environment to run python scripts?

R4444

1,797

asked Nov 13 at 3:24

1 vote

1 answer

84 views

Strange entry point for an old Mac OS X x86 32 bit binary

CommunityBot

1

modified Nov 29 at 7:03

1 vote

1 answer

35 views

Chip identification in nonin module

Timothy

1

answered Nov 14 at 6:16

1 vote

1 answer

63 views

IDC script offsets

CommunityBot

1

modified Nov 27 at 14:06

0 votes

0 answers

59 views

Why ghidra does not use label variables and uses constants to represent code local variables?

raw

1

asked Nov 11 at 13:15

0 votes

0 answers

39 views

Reverse Engineering A RS-485 Steam Shower Protocol

Jay McClure

1

asked Nov 12 at 16:04

0 votes

0 answers

59 views

ARM64 Stack Layout - Why 100x'A' Doesn't Crash?

alond22

101

asked Nov 10 at 18:20

0 votes

1 answer

50 views

My ida.reg file got deleted, is there any way to restore ida?

R4444

1,797

answered Nov 11 at 0:53

0 votes

1 answer

77 views

Mnemonic suffixes for x86-64 assembly for AT&T syntax

Ruslan Garipov

126

answered Nov 8 at 5:28

3 votes

1 answer

43 views

JEB Community Edition - Difference between Script vs Plugin?

dazzleworth

51

answered Nov 10 at 9:49

0 votes

0 answers

37 views

Windows boot sequence operation

Claude

1

asked Nov 10 at 15:43

1 vote

1 answer

67 views

Anyone here capable of removing a launch condition from an old Win32 file having a "Sony InstallLock"?

CommunityBot

1

modified Nov 23 at 11:01

0 votes

0 answers

33 views

Help on identifying encryption/encoding scheme

Grigoris L.

101

asked Nov 10 at 12:22

0 votes

1 answer

72 views

Cracking cryptographic function with radare2

CommunityBot

1

modified Nov 25 at 15:08

0 votes

0 answers

44 views

IDA Free Debugger slows down app substantially

sudhackar

2,629

modified Nov 10 at 4:20

0 votes

0 answers

19 views

DesignAKnit shape (.shp) file format

Tom Price

1

modified Nov 11 at 22:38

1 vote

0 answers

54 views

How can I make IDA disassemble in NASM-like syntax instead of MASM-like syntax?

LyZeN77

11

asked Nov 6 at 15:25

0 votes

0 answers

23 views

how to set flag in windbg

anonymous bear

313

asked Nov 10 at 0:00

0 votes

1 answer

44 views

GWT: Deserialize objects sent/received via websocket

CommunityBot

1

modified Nov 21 at 13:04

0 votes

0 answers

32 views

Audio problem rushing?

Jack

1

asked Nov 6 at 19:22

Top Questions

Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.