Questions tagged [binary-diagnosis]

Binary diagnosis is the art of understanding the properties of an unknown binary stream of data without any additional information. Usually done as a last resort due to lack of related code to reverse engineer or format specifications. Examples include understanding a network protocol or a file format with only the messages or files available for analysis.

Filter by
Sorted by
Tagged with
1 vote
0 answers
71 views

Source code for an mp3 player?

I know this title sounds a little dumb but if you would please bear with me for an explanation. I have a Valoin-made mp3 player I bought close to 3 years ago now. Via a series of interesting ...
0 votes
0 answers
201 views

Extracting sprites from old DOS game

I'm trying to extract the sprites from the old dos version of Street Fighter 2 The sprites are spread over a couple files (SPRITES1.SF2, SPRITES2.SF2), there is another binary file called INDEX.SF2, ...
2 votes
1 answer
194 views

Reverse engineering Roland TR-8S kit file format .t8k

I'm trying to figure out the file format that the Roland TR-8S drum machine uses for importing/exporting drum kits. My goal is to replace the sample (PCM) data within a kit. It's a proprietary binary ...
0 votes
2 answers
219 views

Open unknown image format (probably a RAW image)

I copy image files here from a linux based system which ends with .bin. Unfortunately I don't know how to open it. The goal is to convert images to this format later. What I have already tried: Open ...
  • 73
1 vote
0 answers
110 views

What type of file has the file signature 'BOOT'?

I have a .bin file which I am trying to disassemble into something that I can edit. Given that binary files can contain just about any binary data, I found it difficult to assess what file data is ...
  • 61
0 votes
1 answer
652 views

Advanced Binary Exploitation CTF

I wanted to ask your assistance: Where can I find advanced ctfs (that hopefully contain solutions) regarding binary/kernel exploitation? I am interested on finding x86_64 linux/windows/arm64 that ...
  • 26
0 votes
1 answer
921 views

decryption of firmware file from modem/router Speedport Plus (Sercomm not ZTE)? [closed]

Although I have no hope really I will leave this here in case someone has the ability and time to help. This is from a modem/router widely used in countries like Germany, Greece and others from ...
  • 9
2 votes
1 answer
931 views

Extracting the contents of an unknown file format

I need some help and advice here. I'm self-learning how to reverse engineer a file content of an unknown format. Here's the content of two files: E5 44 2A F9 1C 72 96 B9 CA B2 40 33 DA 19 B9 56 C4 5F ...
  • 121
2 votes
3 answers
891 views

Reverse engineering a partially known binary format

I have files with binary data, the format description of them is very vague and incomplete. E.g., it states that records start with header byte, like (hex) FA, followed by datetime (accurate down to ...
0 votes
0 answers
324 views

reversing xiaomi update firmware encrypted?

I am playing around with a xiaomi firmware [mijia_4k_0.6.16.02] for a camera Running binwalk on the file I see this output DECIMAL HEXADECIMAL DESCRIPTION ----------------------------------...
3 votes
2 answers
580 views

Reverse engineering a checksum algorithm

I am attempting to implement an editor for a discontinued hardware drum synthesizer which uses undocumented system exclusive MIDI messages for communication. I've figured out the patch format, but I ...
1 vote
1 answer
201 views

Deciphering an unknown graphics format

For my own amusement, I dumped the files of an old Nintendo DS video game I have (the company has long since gone bankrupt/closed) and am trying to extract the assets. I have recovered game text, ...
2 votes
0 answers
51 views

How do I decode arbitrary data from a raw extracted binary?

I have a IoT scale that stores my measurements into records and passes them onto my phone. I was able to read directly off a flash chip and create a binary file. The chipset is ARMv7. I want to be ...
1 vote
2 answers
4k views

Extracting the contents of an unknown archive file format

I need some help and advice here. I am privately learning on how to reverse engineer our teachers custom file archive file that have other files stored inside of them. for school project. But, I am ...
  • 21
9 votes
1 answer
1k views

Need help to reverse engineer a dog collar transmitter

I have a Petrainer PET998DRU shock collar (similar to this one) that got partially chewed up by the dog it is supposed to train. I salvaged it to the point where I have the following buttons: Mode (...
  • 93
1 vote
3 answers
4k views

What to do with .dd files? [closed]

Okay so I am doing picoCTF and I am very new to ctf. Now in one of the questions I am given a .dd file and the hint says Some files have been deleted from the disk image, but are they really gone? I ...
  • 19
2 votes
1 answer
114 views

Can't identify checksum type in unknown RS485 protocol

I need to reverse a RS485 protocol in order to extract some values for further usage. Unfortunately only these few messages are available at the moment. They repeat continuosly. Only in special ...
4 votes
1 answer
2k views

What are the steps to reverse engineering a Shockwave .DCR file?

I have been fascinated by reverse engineering after making several emulators and finding the pret community. I love the idea behind decompiling old games and recreating source code that recompiles ...
0 votes
1 answer
153 views

How can I tell if a virus was made by Russians? [closed]

I have been looking around quite a bit on the internet for something that could tell me more than basic section on a binary. I have a PE file and usually I see just what compiled it (MSVS or GCC ... ...
  • 723
0 votes
1 answer
75 views

How to find out where an application stores the resolutions it allows?

Many applications (in particular most games) offer a set of resolutions to choose from. Some of them are pretty open and allow basically every resolution the underlying system seems to be capable of, ...
  • 103
1 vote
1 answer
62 views

How could colors be encoded in these values?

I've got a number of colors which I'm trying to reverse engineer from a binary blob. I've narrowed it down to a small section of the file, with the following values: c[(0,0,0)] = ...
  • 51
0 votes
1 answer
88 views

What is the format of this time?

I'm trying to interpret a bunch of bytes I'm receiving from a GPS tracker. There are 3 sequential bytes that I believe mean hours, minutes and seconds. I recorded timestamps along with the messages I ...
  • 103
12 votes
0 answers
522 views

Problems calculating checksum for AirConditioner

I am trying to reverse engineer an AC Indoor unit <-> thermostat communication. So far I've succeeded in parsing the bits and bytes. I discovered that the upper and lower nibbles need to be ...
0 votes
1 answer
3k views

.bin files Firmware

I'm looking for help in analyzing a few .bin files. I have a program that installs a "firmware" update when I connect my camera through USB. I'm on a Mac Os Sierra. Inside the Applications Folder ...
3 votes
2 answers
394 views

Interpret binary format of matrix files provided (*.mtx)

I can't figure out exactly how these binary matrix files are formatted, other than the 2 little-endian 32-bit unsigned integers in the header. Supposedly the following is a 3x3 identity matrix: 0300 ...
3 votes
1 answer
811 views

Reverse engineering serial communication CRC algorithm

I'm working on reverse engineering the serial communication protocol of an obsolete electronic control system, but I'm having trouble figuring out the CRC algorithm and polynomial. I have reverse ...
3 votes
1 answer
236 views

reverse engineering file containing time series data

I have to decode a proprietary file format which mainly contains time series data. The only thing I was told was that the content is 'zipped', although I am not sure whether it is really zipped or ...
  • 31
3 votes
0 answers
765 views

Reverse Engineering a 16-bit CRC algortihm

I have a set of data bytes and their CRC values available to me. I want to know the CRC algorithm used by it. CRC is 16 bit long. firstly I tried to find out using CRC RevEng but that is showing "...
  • 31
3 votes
0 answers
613 views

Reverse Engineering SCE .pkg Files

To elaborate, I need help decompressing SCE (Sony Computer Entertainment) .pkg files. I've found several common patterns between multiple versions of the same file (released over the span of two years ...
  • 31
2 votes
1 answer
91 views

Unkown Swap Encoding

I'm trying to figure out this encoding in malware.. All I have are the static strings.. I was able to figure one out so there is plaintext on one: e-snAetgrU$ translates to $User-Agent Here are ...
3 votes
0 answers
944 views

Radio Signal 433.92MHz ASK OOK modulation, encoding?

Considering a key fob for RKE (remote keyless entry, automotive) its signal has been captured: It sends at 433,92MHz simple on/off. Following I regard the deltas (time differences between on-off or ...
16 votes
2 answers
3k views

Decoding an unknown image format with "DREK" signature (*.drk)

There are some unknow images, which I would like to decode to RRGGBBAA format. It was a really hard work, but at the moment I can somewhat understand, that which part of the binary is responsible for ...
  • 204
6 votes
2 answers
2k views

Determining CRC algorithm (16 bit?) over RS-232

I give up.... I've tried for two years to determine which CRC algorithm is being using over an RS-232 serial connection between two pieces of equipment. The equipment dates from about 2002. I'm only ...