Hottest Questions Today

0

votes

2

answers

50

views

Why are certain functions from kernel32.dll always imported?

modified 5 hours ago Igor Skochinsky♦ 33.6k

2

votes

1

answer

28

views

When would a program normally transfer data between memory and coprocessor?

disassembly assembly binary-analysis arm

modified 14 hours ago Igor Skochinsky♦ 33.6k

1

vote

1

answer

63

views

Why address space is different for Ghidra, IDA and xDebug runtime and which one to use?

ida ghidra dll-injection address

modified yesterday Irbis77 66

0

votes

0

answers

18

views

Changing variable in firmware.bin of UVC web camera

firmware binary binwalk

modified yesterday Vulisha 1

0

votes

2

answers

49

views

Not Understanding the FU540 Boot Process

assembly firmware memory static-analysis risc-v

modified yesterday Jonathon Anderson 101

0

votes

1

answer

18

views

ARM floating point register S0 used without initialization

ida disassembly arm

answered Sep 23 at 21:29 Ian Cook 1,974

0

votes

0

answers

16

views

Ghidra on Arch Linux opens only a blank window [closed]

ghidra

asked Sep 23 at 16:24 Jontismo 1

1

vote

0

answers

13

views

parallel NAND flash dumped with dd mtd0-12

linux

asked Sep 23 at 20:03 Bob smith 11

1

vote

0

answers

15

views

How do relocations work for imported functions in SH4 ELF?

ida ghidra elf sh4 relocations

asked Sep 23 at 17:10 Anton Kukoba 1,720

0

votes

0

answers

12

views

BaseHTTPRequestHandler + ThreadingMixin = unclosed port

idapython

modified 2 days ago Orwellophile 241

1

vote

1

answer

64

views

Finding AES Key in binary using Ghidra and FindCrypt

disassembly ghidra decryption

answered Sep 21 at 4:59 Rolf Rolles 6,625

0

votes

0

answers

19

views

Is there a way to refresh PDB read during file loading with Odbg 1.10?

ollydbg debugging-symbols pdb

asked Sep 22 at 18:01 Knoob87 314

0

votes

0

answers

12

views

Procyon vs CFR for Java Decompiler

decompilation

asked Sep 23 at 0:37 Anston Sorensen 1

0

votes

0

answers

29

views

Is it possible to detect that a function has been called from a loop? - Radare-2

disassembly radare2

asked Sep 20 at 11:50 user1384421 1

0

votes

0

answers

27

views

Reverse engineering the bluetooth connection between a Nintendo Switch and Nintendo Joy-Cons

protocol bluetooth

asked Sep 20 at 13:12 TheBeautifulOrc 101

0

votes

0

answers

34

views

When patching static software, is there a preferred patching strategy?

binary asm

asked Sep 20 at 5:27 tabdiukov 177

1

vote

1

answer

58

views

Java Malware Dollar Sign

java

answered Sep 21 at 19:53 Johann Aydinbas 1,251

-1

votes

0

answers

50

views

Decrypting Photo

encryption decryption cryptography cryptanalysis

modified Sep 19 at 13:26 julian♦ 6,589

0

votes

0

answers

16

views

I need full dump Speedport entry 2i zte home router's [closed]

dump

asked Sep 20 at 13:24 john hemn 1

0

votes

1

answer

48

views

Decode byte numbers into string

malware c#

modified Sep 18 at 19:06 julian♦ 6,589

-1

votes

1

answer

54

views

Cryptography File Decryption

encryption decryption cryptography xor

modified Sep 19 at 1:39 han 1

1

vote

1

answer

35

views

What 8051 instruction extensions are there?

8051

answered Sep 18 at 16:55 Igor Skochinsky♦ 33.6k

2

votes

0

answers

27

views

Trying to decrypt the output from a BLE scale

decryption

asked Sep 19 at 5:34 Jake Wang 21

2

votes

0

answers

31

views

How I can interface the MCU without soldering?

hardware router

modified Sep 18 at 16:10 Dimitrios Desyllas 121

0

votes

1

answer

48

views

How to call your version of the existing function using proxy dll?

c++ dll-injection program-analysis

answered Sep 19 at 12:53 Irbis77 66

0

votes

1

answer

109

views

convert C++ code to python code

decompilation c++ ghidra

answered Sep 15 at 14:07 Paweł Łukasik 4,422

0

votes

0

answers

24

views

Guess wich microcontroller own the firmware possible?

firmware embedded

asked Sep 17 at 6:33 Damien 1

1

vote

0

answers

59

views

Reversing Brother Sewing Machine Firmware

firmware embedded

asked Sep 15 at 7:30 zqqua 11

1

vote

0

answers

26

views

I attempted to read from an Intel 87C54 microcontroller and it came up all FF's. Any way to read from this?

firmware hardware dumping

asked Sep 15 at 22:32 flarn2006 166

1

vote

0

answers

63

views

Pascal string representation in Hex-Rays Decompiler of IDA Pro

ida disassembly static-analysis

asked Sep 13 at 8:56 AquaRegia 11

1

vote

1

answer

54

views

Ida Pro doesn't recognize known function

ida static-analysis ida-plugin libraries libc

modified Sep 13 at 11:28 0xC0000022L♦ 10.2k

0

votes

1

answer

28

views

Creating table with IDAPython

ida idapython python disassemblers

answered Sep 14 at 22:42 Igor Skochinsky♦ 33.6k

2

votes

1

answer

144

views

How to get offset of specific function in exe?

debugging x64dbg executable x86-64

modified Sep 8 at 13:11 ruakh 23

0

votes

1

answer

37

views

How to load a pdb file from the hard drive with IDA Pro?

ida pdb

answered Sep 12 at 14:48 Rolf Rolles 6,625

0

votes

1

answer

49

views

How can I detect if my application is running in x64debug?

x64dbg anti-debugging c#

answered Sep 11 at 18:05 Niraeth 71

0

votes

1

answer

49

views

What is most likely the reason causing this problem?

ida dynamic-linking

answered Sep 14 at 22:40 Igor Skochinsky♦ 33.6k

0

votes

1

answer

153

views

What does this function do?

ida android arm elf static-analysis

modified yesterday CommunityBot 1

0

votes

1

answer

74

views

IDA PRO decompiler expression last question (pseudocode)

ida decompiler pointer

modified 22 hours ago CommunityBot 1

0

votes

0

answers

19

views

dnSpy - Multiply Value with Edit IL Instructions?

dnspy

asked Sep 13 at 14:50 ACL 1

0

votes

1

answer

40

views

why does dalvik remove invocations during optimisation?

decompilation android byte-code dalvik

modified Sep 13 at 7:21 Robert 401

1

vote

2

answers

103

views

How to prevent File Modification in C++

windows c++ patching binary-editing

modified 23 hours ago CommunityBot 1

0

votes

1

answer

52

views

How to unpack Armadillo protected software using x64dbg?

windows x64dbg executable exe

answered Sep 10 at 18:17 Niraeth 71

2

votes

0

answers

28

views

Is it possible to fake being joined to a domain in Windows 10?

windows malware windows-10

modified Sep 11 at 7:25 Sean W. 121

0

votes

0

answers

27

views

Trying to debug with IDA Pro + Windbg on remote VM: It won't break or step

ida debugging windbg driver vmware

asked Sep 11 at 2:44 NERL 31

0

votes

0

answers

25

views

IDA + Windbg does not break on sxe commands

ida debugging windbg breakpoint driver

asked Sep 10 at 19:41 NERL 31

0

votes

1

answer

54

views

Add python to Ida Pro 7.3

ida idapython

modified Sep 23 at 10:00 CommunityBot 1

0

votes

1

answer

118

views

How do I interpret this double offset?

windows x86 c++ static-analysis

modified Sep 10 at 7:56 Niraeth 71

1

vote

0

answers

40

views

Radare2 cannot open bin for writing

disassembly radare2

modified Sep 8 at 14:55 Paweł Łukasik 4,422

questions	8,263
answers	9,897
answered	79%
users	29,687
visitors/day	3,602
more site stats on:	Area 51 Stack Exchange

Top Questions

Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.