Reverse Engineering Stack Exchange is a question and answer site for researchers and developers who explore the principles of a system through analysis of its structure, function, and operation. It only takes a minute to sign up.
Sign up to join this community
I am learning reverse engineering, and would like a way to try out methods I'm learning.
In web security, the way to try out and learn methods is a thing called DVWA. It is an insecure web app made for web security people to exploit.
Is there something like this for reverse engineering?
You can try your hand at analyzing programs which are used to introduce reverse engineering concepts in academia such the binaries available for download at RPI's "Modern Binary Exploitation" course page at http://security.cs.rpi.edu/courses/binexp-spring2015/ in the sections titled "Tools and Basic Reverse Engineering", "Extended Reverse Engineering" and "Reverse Engineering Lab". I believe the 11 or so crackmes included in the challenges.zip file are similar to the IOLI crackme files, for which there are many tutorials available.
One of the binaries in the bombs.zip file is called "cmubomb" which is Carnegie Mellon University's binary bomb, also available at their student lab site http://csapp.cs.cmu.edu/2e/labs.html, for which there are also many tutorials across the web.
NYU also has some reverse engineering "challenge applications" to analyze at https://github.com/isislab/Hack-Night#workshop-materials-5.
Note: The binaries from the aforementioned sources are Linux ELF 32-bit executables. Almost all are unstripped. If you would like to analyze Windows binaries, you can get Win32 versions of the IOLI crackmes from https://github.com/radare/radare2book/tree/master/crackmes/ioli. The IOLI-crackme.tar.gz file available for download there contains 10 Windows PE32 executable files.
Update: The CMU labs, including the binary bomb, now require an Instructor account to download.
