Reverse Engineering Stack Exchange is a question and answer site for researchers and developers who explore the principles of a system through analysis of its structure, function, and operation. It only takes a minute to sign up.

Sign up to join this community
Anybody can ask a question
Anybody can answer
The best answers are voted up and rise to the top

Top Questions

-1 votes
0 answers
244 views

What does this lowlevel function do?

1 vote
1 answer
108 views

Strange DWORD/QWORD C++ Strings in decompilation

1 vote
1 answer
100 views

x86 - How do I detect virtualized code by looking at the assembly?

1 vote
1 answer
93 views

help with Ghidra and rewriting assembly

-1 votes
1 answer
89 views

How to call and what means: _DWORD *__thiscall

0 votes
1 answer
65 views

Deobfuscator and decompiler for .NET [closed]

1 vote
1 answer
55 views

how to get indirect callsite function return type and arguments

0 votes
0 answers
90 views

Basic buffer-overflow on a remote program with Python/pwntools

1 vote
2 answers
70 views

What is the best approach to reverse a custom TCP Application Layer?

2 votes
1 answer
60 views

How can I make Ghidra have access to external libraries?

1 vote
1 answer
76 views

idapython: how to reset pointer type for variables

1 vote
1 answer
73 views

Exporting dll out of a process memory

0 votes
2 answers
55 views

How to set a variable as "pointer to struct" in IDA in order to automatically replace offsets by field names?

1 vote
1 answer
54 views

How to load a PDB file into x64dbg?

0 votes
1 answer
54 views

How to reference an address set by 2 instructions in Ghidra

0 votes
1 answer
66 views

Frida hook multiple processes

1 vote
1 answer
51 views

Calling function with string as parameter

0 votes
1 answer
49 views

Find the first function that sets the value currently stored in a given register

1 vote
0 answers
55 views

Implementing syscalls under Miasm

0 votes
1 answer
54 views

x64dbg: is there a way to save the complete disassembly of a module to a text file?

0 votes
0 answers
53 views

Tenda router + Firmware-Mod-kit = Firmware header not supported

1 vote
1 answer
39 views

Understanding disassembly information from Visual Studio's dumpbin and GNU's objdump

0 votes
2 answers
39 views

What techniques are there for mapping code in IDA Pro to the same code in Ghidra, or vice versa?

0 votes
1 answer
49 views

Floating point number mangled in a proprietary file

0 votes
0 answers
47 views

Can't get Visual C++ to generate the same code give by Ghidra

2 votes
0 answers
47 views

Load to Ida binary with all of SO

0 votes
0 answers
46 views

Password encryption when transferring from master to PLC

0 votes
0 answers
45 views

Reverse Engineering VMWare (help needed)

0 votes
1 answer
34 views

How can I use cutter like ida, trying to search by address

0 votes
1 answer
43 views

Is iOS 15 kernel cache encrypted?

1 vote
0 answers
43 views

Reverse engineer CRC Canbus

0 votes
0 answers
39 views

It does not appear to be a standard CRC. Can I know this formula in reverse?

1 vote
1 answer
39 views

How to define an xmmword variable in IDA?

0 votes
0 answers
35 views

How to fix CRC32 checksum in an xz-compressed folder without corrupting the data?

0 votes
0 answers
33 views

Is there any problematic difference in Intel and AMD processors for reverse engineering?

0 votes
1 answer
25 views

Interpreting Response for Modbus/TCP function code 0x08 Diagnostics

1 vote
1 answer
25 views

What are these Device Object Characteristics / Flags in Windows 10 ntoskrnl!IopParseDevice

0 votes
0 answers
31 views

Finding function called when button is clicked

1 vote
0 answers
31 views

It does not appear to be a standard CRC. Can I know this formula in reverse?

0 votes
1 answer
23 views

Debugging Windows applications on Linux: Hardware watchpoints and backtracing in IDA not working and winedbg hardware watchpoints borderline unusable?

-1 votes
0 answers
29 views

ida pro overwrite bytes not increase rom location (Value)

0 votes
0 answers
28 views

How can IDA Pro disassemble paged memory from HCS12 processort?

1 vote
0 answers
27 views

In IDA is there a way to load the PE headers after the initial loading?

1 vote
0 answers
25 views

Warning: struct->til conversion failed

1 vote
0 answers
24 views

How to convert addresses shown by IDA when statically analyzing a DLL to real addresses in runtime

0 votes
1 answer
24 views

IDA show xrefs in .pdata and nothing else

0 votes
0 answers
24 views

Reverse engineering Powermac G4 Cube firmware

0 votes
1 answer
24 views

What does the code do?


Looking for more? Browse the complete list of questions, or popular tags. Help us answer unanswered questions.