6

I am learning reverse engineering, and would like a way to try out methods I'm learning.

In web security, the way to try out and learn methods is a thing called DVWA. It is an insecure web app made for web security people to exploit.

Is there something like this for reverse engineering?

  • Exploit exercises is a nice resource. More oriented to exploiting than simply reversing, though. – Martin Dec 15 '16 at 0:47
6

You can try your hand at analyzing programs which are used to introduce reverse engineering concepts in academia such the binaries available for download at RPI's "Modern Binary Exploitation" course page at http://security.cs.rpi.edu/courses/binexp-spring2015/ in the sections titled "Tools and Basic Reverse Engineering", "Extended Reverse Engineering" and "Reverse Engineering Lab". I believe the 11 or so crackmes included in the challenges.zip file are similar to the IOLI crackme files, for which there are many tutorials available.

One of the binaries in the bombs.zip file is called "cmubomb" which is Carnegie Mellon University's binary bomb, also available at their student lab site http://csapp.cs.cmu.edu/2e/labs.html, for which there are also many tutorials across the web.

NYU also has some reverse engineering "challenge applications" to analyze at https://github.com/isislab/Hack-Night#workshop-materials-5.

Note: The binaries from the aforementioned sources are Linux ELF 32-bit executables. Almost all are unstripped. If you would like to analyze Windows binaries, you can get Win32 versions of the IOLI crackmes from https://github.com/radare/radare2book/tree/master/crackmes/ioli. The IOLI-crackme.tar.gz file available for download there contains 10 Windows PE32 executable files.

Update: The CMU labs, including the binary bomb, now require an Instructor account to download.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.