All Questions

Filter by
Sorted by
Tagged with
0
votes
0answers
4 views

parallel NAND flash dumped with dd mtd0-12

Hi hope some one can help i have tried dumping nand on a system in u-boot with the dd command so i have mtd0-12 but have now messed up bootloader now i have non booting device/brick. i have tried jtag ...
1
vote
0answers
8 views

How do relocations work for imported functions in SH4 ELF?

I build very simple hello world code with sh4 gcc compiler as shared library: #include <stdio.h> void hello() { printf("Hello world!\n"); } But when I load .so file into the ...
0
votes
0answers
5 views

Ghidra on Arch Linux opens only a blank window

My problem is that whenever i open Ghidra on Arch Linux it first opens a loading screen, then shows the tip of the day window and then shows only a blank window. I have tried the default ghidra binary ...
0
votes
1answer
25 views

Not Understanding the FU540 Boot Process

I'm reading the manual for the SiFive FU540-C000 trying to understand the boot process, and I'm not making sense of the initial steps after power on. I'm using MSEL = 1111 based on the recommendation ...
0
votes
1answer
15 views

ARM floating point register S0 used without initialization

The following code snippet is the first few assembly instructions of a function. The code runs on armv8a. SUB SP, SP, #0x170 is the first assembly instruction of the function. Please note the ...
0
votes
0answers
8 views

Procyon vs CFR for Java Decompiler

I'm trying to find the best Java class decompiler thats the most reliable. What's the difference between Procyon and CFR as far as decompiling the most classes sucessfully?
0
votes
0answers
14 views

Is there a way to refresh PDB read during file loading with Odbg 1.10?

Is it possible to make OllyDbg reload PDB symbols on each load of file? ie, refresh. Just like the option Analysis -> Remove object scan from module but rather automatic on file reload.
0
votes
0answers
8 views

BaseHTTPRequestHandler + ThreadingMixin = unclosed port

In developing a RESTful API for IDA >= 7.5 [https://github.com/sfinktah/idarest75], I have observed that a standard threaded webserver does not release it's socket when IDA terminates, unless it is ...
1
vote
1answer
59 views

Finding AES Key in binary using Ghidra and FindCrypt

I would like to learn more about RE. I wrote a simple program on a STM32F107 which does nothing else than encrypting and decrypting a text once using AES128-ECB. Here is the C code (I intentionally ...
0
votes
0answers
13 views

I need full dump Speedport entry 2i zte home router's [closed]

I need full dump Speedport entry 2i zte home router's This is a picture of a router
0
votes
0answers
26 views

Reverse engineering the bluetooth connection between a Nintendo Switch and Nintendo Joy-Cons

I'm curious on how the Bluetooth connection between a Nintendo Switch and it's proprietary Joy Con controllers works. I've already connected the Joy Cons to my PC and inspected the packages with btmon ...
0
votes
0answers
24 views

Is it possible to detect that a function has been called from a loop? - Radare-2

is it possible to detect a function is calling from inside a loop in Radare-2. for (i = 0; i<n; i++) foo() foo() ==> 0x00402f90 // starting address Thanks
0
votes
0answers
32 views

When patching static software, is there a preferred patching strategy?

Suppose you have something like this (in x86-like asm) 10 | mov ebx 1 // good response from function "check" below 20 | call check() // modifies eax 30 | test eax ebx 40 | jeq good 50 | bad: ...
1
vote
0answers
27 views

Trying to decrypt the output from a BLE scale

I'm trying to decrypt the readings from a BLE scale, which seems to be transmitting readings in the manufacturer data. Here are a few readings using python bleak library to scan device advertisements: ...
0
votes
0answers
49 views

Decrypting Photo

I was given a file with no extension and it was said to be a photo that was taken with a vintage Kodak DCS200. How do I go about decrypting this file? #Encrypt the image using ECB mode openssl enc -...
1
vote
0answers
28 views

How I can interface the MCU without soldering?

My router has the following pin layout between flash memory and MCU: The big chip is the MCU from a Sercomm H300s router. What I want is to analyze the signaling between 2 chips using the most ...
1
vote
1answer
33 views

What 8051 instruction extensions are there?

I'm helping reverse engineer a small embedded device. We've successfully extracted some code fragments, which have been identified as 8051 machine code. However, it's using some kind of instruction ...
0
votes
1answer
48 views

Decode byte numbers into string

There is this grabber called Itroublve grabber, which a lot of people use, and I wondered what it's aes encryption key is, so I looked at the code, and I found this: Key = new byte[] { ...
-1
votes
1answer
54 views

Cryptography File Decryption

I was given two files without extensions and was told to decrypt them.
0
votes
0answers
24 views

Guess wich microcontroller own the firmware possible?

I have a collection of firmware dumps, I need to classified theme for the hw( that I have not, I have only those dumps), is there a way to guess for what microcontroller are a firmware developped only ...
1
vote
0answers
25 views

I attempted to read from an Intel 87C54 microcontroller and it came up all FF's. Any way to read from this?

I'm using the popular TL866II Plus programmer to read from the chip. I see in the datasheet that it has lock bits which can disable the verify (read) function, but I'm not sure if that causes an ...
1
vote
1answer
56 views

Java Malware Dollar Sign

I am analyzing a mobile malware sample and got a trouble. When i put sample in JADX, i see some dollar sign. I mean like this; What does these dollar signs means?
1
vote
0answers
59 views

Reversing Brother Sewing Machine Firmware

Context: Taking my first stab at reverse engineering, I am trying to install firmware intended for a machine sold in a different region (EAS) to my machine (US). I believe Brother sells the same ...
0
votes
1answer
46 views

How to call your version of the existing function using proxy dll?

I have bits of code which decompiles a small part of the existing program. I have added it to the proxy dll. The code to the existing functions is hooked through Detour and looks like below (gui.h and ...
1
vote
1answer
105 views

convert C++ code to python code

while I'm doing RE using ghidra i saw this code byte bVar1; byte bVar2; uint uVar3; uVar3 = 0; while (bVar2 = (byte)uVar3, (char)bVar2 < '\b') { bVar1 = *(byte *)(uVar3 + param_1) ^...
0
votes
1answer
28 views

Creating table with IDAPython

I'd like to create the table like below, I could not found any clue while googling it. Is it possible to make table with IDAPython, especially with idaapi.simplecustviewer_t class? Any advises would ...
0
votes
0answers
18 views

dnSpy - Multiply Value with Edit IL Instructions?

I'm reverse engineering an old ad game that I want to edit the rewards function with. This is my first time trying to do so and I'm trying not to edit the method as it leads to dozens of compiling ...
1
vote
0answers
59 views

Pascal string representation in Hex-Rays Decompiler of IDA Pro

I'm trying to prettify a representation of Pascal-string "Could not access file "" in Hex-Rays decompiler's output. As you can see below, now its type is char[25] due to inclusion of ...
1
vote
1answer
53 views

Ida Pro doesn't recognize known function

I open statically Arm binary with Ida Pro. While I reversing I find out some function like strstr and memcpy and etc. That Ida doesn't understand that those function are strstr and memcpy(for example) ...
0
votes
1answer
35 views

How to load a pdb file from the hard drive with IDA Pro?

All the answers I see on Google are about how to load PDB files from online servers. But I have an exe I'm debugging. It's my own exe. Only reason I want to debug it, is so that I can step through ...
0
votes
1answer
46 views

How can I detect if my application is running in x64debug?

I am writing my own applications to practice reversing. I want to be able to detect debuggers and change the execution in response. When building the application, I am easily able to detect it is ...
2
votes
0answers
28 views

Is it possible to fake being joined to a domain in Windows 10?

I'm dealing with a malware sample from a pentest that will only execute properly if the system is a member of the target organization's Windows Active Directory domain. Rather than standing up my own ...
0
votes
0answers
23 views

Trying to debug with IDA Pro + Windbg on remote VM: It won't break or step

I'm new to remote debugging so plz bare with me. I'm trying to break and step through code on driver loading, during windows boot. So I'm using a windows 10 host, running IDA pro with windbg. This is ...
0
votes
0answers
23 views

IDA + Windbg does not break on sxe commands

I'm new to remote debugging, so I have no idea why it isn't breaking. My setup is a Windows 10 x64 host running IDA pro with its built-in windbg debugger. The virtual machine is a vmware running ...
0
votes
1answer
47 views

How to unpack Armadillo protected software using x64dbg?

I am planning to reverse-engineer a Windows executable that has been protected with Armadillo. When I put the executable through Detect It Easy, the results show that the executable was protected with ...
0
votes
1answer
49 views

What is most likely the reason causing this problem?

I'm trying to reverse engineering a obfuscated game, and when I import this related .so file into IDA, it output this : What technique is most likely been used in achieving such obfuscation ?
2
votes
1answer
137 views

How to get offset of specific function in exe?

Suppose I have self-compiled exe-file (aka portable executable), its source (c/c++) and generated pdb-file. And what if I want to get offset of its function (non-winapi function) in debugger (x64dbg, ...
1
vote
0answers
39 views

Radare2 cannot open bin for writing

Im on Kali and im using Radare2 but it says r2 -d bin Killing child process 16151 due to an error Killing child process 16152 due to an error [w] Cannot open 'dbg://./bin' for writing. I tried chmod +...
0
votes
1answer
39 views

why does dalvik remove invocations during optimisation?

This is original smali code of a classes.dex method before installation .method public static createAutoMatchCriteria(IIJ)Landroid/os/Bundle; .registers 6 new-instance v0, Landroid/os/Bundle; ...
0
votes
0answers
45 views

Ida pro doesn't demangle all function names

I am using Ida Pro 7.0 and working with a binary (firmware) written in C++ .Fortunately there are symbols in the firmware and I know function names but Ida didn't manage to demangle all function ...
0
votes
0answers
36 views

Decrypting my router config backup file

so I have this ONT router/mode (ZTE F660) provided to me by the ISP, it's interface contains very little settings and I wanted to see if I can get anything useful from it's config backup file. The ...
1
vote
1answer
45 views

Reversing a .LIB file

So I found an mp3 player the other day and I thought it'd be fun to try and reverse engineer the files I found on it (and maybe even try to modify it). When I plugged it in to my pc I was surprised to ...
0
votes
0answers
23 views

Huawei HG8145V5 user credentials

I have Huawei HG8145V5 and I backed up config file which contains encrypted root and admin credentials, but I dont know how they are encrypted. Here is an example of one password $2:2`0Ui@T0@O0;x+V:x&...
0
votes
0answers
22 views

Need help with patching .plt function

so i want to patch .plt function but my freind told me i should use xref to find the real caller ! after i find it and patch it ! will the .plt function execute ? the function start with PUSH ...
0
votes
0answers
47 views

Ghidra - search for library usage?

Using Ghidra: if library A imports library B, is there a way to search for all function calls from A into B? And more specifically: if B exports function foo, how can I find where that specific ...
1
vote
0answers
29 views

How to print a manually defined struct in IDA pro while debugging?

Lets say that i have manually defined a local struct while debugging in IDA pro, when i hover my mouse over any variable that is of that struct type, i can see its members. Now if i have the variables'...
0
votes
0answers
26 views

dnSpy - Decompiler generated variables can't be evaluated

I write a code in dnSpy and after running , the dnSpy give me errors. My code : ProductInfo pi = new ProductInfo(); pi.name = "Jack"; pi.isactive = true; pi.license = "123"; ...
0
votes
0answers
30 views

Need help logging string in smali

I'm trying to log p1 string to logcat. This is my function. new-instance v4, Ljava/lang/StringBuilder; invoke-direct {v4}, Ljava/lang/StringBuilder;-><init>()V invoke-virtual {v4, v3}, ...
0
votes
1answer
58 views

Running ELF file built for ARM arhitecture

My goal is to run and debug ELF file (c444) which is compiled for the ARM architecture. I have some experience with x32 and x64 Intel architectures. However, I down know how to proceed with ARM-based ...
0
votes
1answer
56 views

Stuck in finding the algorithm of a save game file CRC/checksum

A sample message-CRC pair looks like this: 00000005 00000000 12121212 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 2F8376FE ...

15 30 50 per page
1
2 3 4 5
166