All Questions

Filter by
Sorted by
Tagged with
0
votes
1answer
14 views

increment a registry which is max value?

I am looking at some assembly code and can't get my head around it. The code below is shown in IDA. My question revolves on what happens in the loop. Let me explain what I exactly dont understand in ...
0
votes
0answers
6 views

Creating a toast in .so file? (Android Apk)

I know its a dumb question but can we create a toast (android pop up message) in an already existing .so file of a decompiled apk using ARM? Thanks.
0
votes
0answers
9 views

How to decode a .plr file

I have a .plr file that contains all of the player information for the game Terarria. I would like to decode it to have a look at what data is stored on this file so that I can play around with making ...
1
vote
3answers
35 views

Ghidra Python - Get x-refs of a specific function

What is the best way to get calling x-refs for a specific function? I am aware of the following method: func = getFirstFunction() while func is not None: func_name = func.getName() if ...
0
votes
0answers
25 views

Develop a Hello World plugin for Ollydbg

I wanted to write a plugin for Ollydbg 2 which shows just a simple message. I write the following one but it doesn't load in ollydbg. I am using ollydbg 2 and my DLL can't load by it. Where is the ...
0
votes
1answer
29 views

Android app crashes even while not edited, how can I solve it?

Installed an application from google playstore and then transferred to it my computer to apparently edit it and without any changes I made to it then I tried to install it through ADB, well the ...
0
votes
0answers
24 views

exploiting a binary using ret2libc

I ran into this binary at a CTF : https://github.com/auehc/AUCTF-2020/tree/master/Pwn/House%20of%20Madness I first tried to exploit it and get a shell using ret2libc technique, however I didn't ...
0
votes
0answers
6 views

Is frida-server latest version compatible with old Android versions

I'm trying to figure out, if it's appropriate to use frida-server latest version (12.8.x at the moment of writing this question), on any Android version (even the old ones like KitKat). I'm asking ...
0
votes
0answers
13 views

Problems after export patch

I have a problem with a file patched. If I run original file with odg32 and edit 4 lines it works ok, but if I export this edit program doesn't works, or better works but not work correctly. I do 4 ...
2
votes
1answer
37 views

Find password in a c compiled binary file

I'm currently learning to do some basic reverse engineering of binary files using Cutter. The program i'm struggling on test if the password entered as argument is correct, if not, return an error ...
0
votes
1answer
30 views

structures defined on stack?

While reading this paper on type recovery from executables, I came across following paragraph: It is worth noting that the domain of parameters of a function can be considered as a structure ...
0
votes
2answers
23 views

ld-uClibc.so.0: No Such file or directory when running qemu-mipsel-static

BLUF: When executing sudo chroot . ./qemu-mipsel-static ./bin/busybox from the squashfs-root folder the error /lib/ld-uClibc.so.0: No such file or directory is returned. Failing to figure out how to ...
1
vote
2answers
49 views

Function prototypes given by Ghidra is not consistent

This is a follow up question to the question I posted over here. According to the answer, I was able to get all the function prototypes from the binary. However, the problem I am having is most of the ...
0
votes
1answer
24 views

Detours not cleaning the stack correctly

I'm trying to hook a function using Detours for the first time. I'm new to reversing software and to hooking, so I may have missed something big here. I'm trying to use this function as a hook: ...
1
vote
1answer
14 views

How to scan the ECU Delphi MT05?

The ECU (Engine Control Unit) MT05 from Delphi is used today in many motorbikes and ATV's: Regal Raptor (Raptor, Daytona and Spider 350) AJP (PR7) Benelli (BN600) CFmoto (Terralander X8) Zongshen (...
0
votes
0answers
13 views

Force command line argument into exe running java

Ok, bit of an odd one I'm modding an old game (IL2 Sturmovik 1946). The game is written in Java, and I have the source code (decompiled) in an Eclipse project. I've been asked to fix a curious bug ...
-1
votes
0answers
20 views

setting an initial value for a bss variable in elf

With the following minimal example code #include <stdlib.h> #include <stdio.h> int zero = 0; int one = 1; int two = 2; void main(int argc, char *argv[]) { if(argc > 1) zero = ...
2
votes
1answer
48 views

CreateToolhelp32Snapshot() access denied (while running as admin or even NT AUTHORITY\SYSTEM)

I've come across a troublesome process which refuses to allow CreateToolhelp32Snapshot(). I also noticed that in sysinternals process explorer it shows "Access Denied" for other things too, such as ...
0
votes
1answer
39 views

Way to get all the function prototype using Ghidra

I have been trying to extract the function prototypes from a binary file using Ghidra. Up for now what I have done was to use the Ghidra's included "Decompile" script and filtered out the function ...
0
votes
1answer
19 views

Ghidra error when edit main signature function

I'm new to ghidra. I download the easy_reverse from crackme.one and open the executable file in ghidra. When I'm trying to edit the main function signature I get an error: Can't parse name: argv[]. I ...
0
votes
1answer
41 views

GDB - Send Python output to the program after SIGINT

I am trying to learn GDB to better understand buffer overflows but I can't find an answer to my problem which is how can I send a Python-generated output to the program when the program asks for user ...
0
votes
0answers
14 views

sym..text_mn --> Symbol Meaning?

I compiled some source code and extracted functions with Radare2 (afj). Often I get a function with "sym..text_mn" function name/ symbol. The other functions are named correctly. What does this ...
-1
votes
0answers
15 views

I cannot access files on my removable drive [closed]

I cannot access files on my removable drive but there is a 'readme' txt that says my files are encrypted. files changed type to 'OPQZ'. please advise
0
votes
0answers
6 views

How to give multiple inputs to IDA when using remote linux debugger every time the program is restarted?

So this is a problem I'm facing when solving pwn CTF challenges i usually need to give many inputs for a program to reach certain point every time i restart it i tried to do it like this, by putting ...
0
votes
0answers
13 views

Hex Rays Mapping To Wrong Variable

The assembly file has multiple variables which both use the rax register. The decompiler did recognize that at least somewhat, since it did create two variables which use the rax register. However, it ...
0
votes
0answers
25 views

What type is this obfuscation ? (iOS Dylib)

Someone published a patch/crack for my iOS app. I wanted to know what does the dylib but it seems to be heavily obfuscated (all strings are obfuscated too). You can see some screenshots below. Can ...
0
votes
0answers
55 views

Jump without jmp near

I need to jump a Hello, I need to jump some lines that lock program in a loop status. i use process hacker to find lines with string in binary but when i find this lines i have not jumps near, in ...
0
votes
0answers
16 views

syscall without saving values in the correct registers

I'm RE a challange of pwnable.tw (dobblesort) and I found some strange things while disassembling the file. My Question is about the syscalls that are done. Why they don't save the value in the ...
0
votes
0answers
7 views

compile gdb with python 3 for gef-ida-interact

I'm trying to use GEF's IDA-interact which has issues with python2. I'm using android-ndk-r20b/prebuilt/linux-x86_64/bin/gdb - v7.11 using Python engine 2.7 How do I compile gdb with python 3.x ? I ...
1
vote
1answer
45 views

Reverse Engineering Java - Deobfuscating symbols

I'm new to Java and working on cleaning up a fairly large Java .jar sample where the obfuscator has renamed symbols into invalid names. For example: import org.lib.00.0.2; public final class 90 ...
1
vote
1answer
32 views

Names not populating from disassembly to decompiler

I am writing a script in IDA Pro. I noticed that when I rename functions with "n" in the disassembly view, that same function is not being renamed in the decompilation. I have never noticed this ...
-1
votes
0answers
18 views

I own a private server of a game that use .lua scripting , i wanna inject modified .lua script into the official game

As the title say it, i own a private server of a game, it use .lua scripting for server files ( scripts ) and .xml for templates, i have all the codes (the official use the same code as my private ...
0
votes
0answers
29 views

What are good tips to reverse engineering code with no variable name information and loss of the debug information?

I am a exploiter for roblox which mean that I execute scripts via an external program called an exploit on running roblox games. To make script for my exploits, I have to use debugging library and ...
1
vote
1answer
29 views

How to find the new address of a function on a new version of the same assembly with IDA?

Well, I have the old version of an assembly with a mapped address to a function I need to detour. The developer has stopped the reverse engineering to that assembly, so now, I want to do his job. But ...
0
votes
0answers
14 views

Disassembly Memory Organization parameters for C166 micro firmware (RAM and ROM section)?

I'm trying to disassemble some microprocessor firmware with C166 architecture in IDA, but I have no idea what to use for the memory organization screen (IGNORE THE VALUES IN ROM/LOADING SIZE) My ...
0
votes
1answer
62 views

How can I debug open source C code for Linux?

I want to debug & reverse engineer open source code such as this project. I usually use CLion to write and debug C code on Linux. I've also used GDB. What steps do I need to take to download a ...
0
votes
0answers
25 views

Problem rebuilding firmware

I'm new to reverse engineering. I only want to add an app to my sat receiver. To start I tried to extract my firmware with ./extract-firmware, it's ok, and I have 1 ecos RTOS, and two cramfs in fmk/ ...
0
votes
0answers
18 views

fuzzing GDI/BITMAP kernel vulnerabilities

i was wondering about gdi/bitmap vulnerabilities in windows kernel(preferably windowds 10). i saw several exploits and papers regarding this subject, and while it all seem really interesting, i did ...
-1
votes
1answer
19 views

Building Radare i get: Makefile:319: libr/config.mk: No such file or directory [closed]

When I run make I get Makefile:319: libr/config.mk: No such file or directory make: *** No rule to make target `libr/config.mk'. Stop.
0
votes
0answers
26 views

Ollydbg Plugin Development

I wanted to write a simple Ollydbg plugin that shows me, for example, a simple message like hello world. in further, I wanted to learn how can I write a complex plugin to hook a function and to modify ...
0
votes
1answer
62 views

Decoding unknown logfile format

I have logfiles in the following format without any documentation: to 12.03.2020 08:04:15 < '7"\05\04\02\16\F6\C6\D6"'#0D to 12.03.2020 08:04:15 > '7S"\05\04\00\02\00\01\91\8E"'#0D to 12.03....
0
votes
1answer
39 views

“check:” keyword in Ghidra

I have disassembled the crackme0x06 challenge (http://security.cs.rpi.edu/courses/binexp-spring2015 inside challenges.zip). It's an ELF 32bit unstripped binary. The decompiled C code using Ghidra ...
-1
votes
0answers
25 views

PDF analyse using pdfstreamdumper

New to the world of Reverse engineering, I analysed a PDF through pdfstreamdumper I found the CVE, and payload also found JavaScript. the JS is obfuscated, I would like to de-obfuscate it to get ...
1
vote
0answers
32 views

Windows binwalk refuses to extract files

I'm trying to reverse engineer the firmware for an AutoDrive AD-520 dashcam. The firmware is available for download here. I've installed binwalk on windows, I can get it to read the file just fine, ...
0
votes
0answers
23 views

Luajit Assembler/Disassembler (.ljbc file)

I have found it for a long time. But it seems dont exist. there's decompiler but it's too old. and i need a tool to translate ljbc file to bytecode and translate bytecode to ljbc file. Here's the ...
0
votes
0answers
20 views

I want to inject a DLL and then memory patch it with a loader, how would I do it?

This DLL is protected by VMprotect 3.x and I can run it in a debugger fine without it showing the "debugger detected" message. I applied my patches to it but it won't save due to it being dynamically ...
1
vote
0answers
40 views

SWF ActionScript byte-code method info does not match AVM2 specification

I have a bunch of SWF files that represent UI in the game. Most of them contain DoABC tag, however the tag type is 300 instead of 82. Putting this trouble aside, I started parsing the tag according ...
1
vote
0answers
29 views

How to ret with jxx in x64dbg's sciprt

main: call foo call bar ret foo: // code cmp $number, 0 je ret // code ret bar: // code cmp $number, 0 je ret // code ret I would like to ...
0
votes
1answer
37 views

c++ reading process memory with injected DLL

The reading works fine until it reaches base+27.058.176(bytes) address. At this address VirtualProtect() failes with error 487 (Attempt to access invalid address). Why does it return this error? Btw ...
-1
votes
0answers
23 views

Do you know unpacker for .Net Reactor version 6.2? [closed]

Do you know unpacker for .Net Reactor version 6.2 ?

15 30 50 per page
1
2 3 4 5
137