Skip to main content

Questions tagged [binary-diagnosis]

Binary diagnosis is the art of understanding the properties of an unknown binary stream of data without any additional information. Usually done as a last resort due to lack of related code to reverse engineer or format specifications. Examples include understanding a network protocol or a file format with only the messages or files available for analysis.

Filter by
Sorted by
Tagged with
0 votes
0 answers
28 views

Why would unreadable data recovered from a drive be non-recoverable?

I ran Disk Drill on a drive that was a member in a failed software RAID mirror on macOS. The drive seemed to be fine, but was showing up as "uninitialised", so the drive didn't fail as such ...
Iain Dooley's user avatar
2 votes
0 answers
39 views

Find out what is this binary database entry and what format it is

the following varbinary "BUFFER" of a database entry is for an article. FIELD_0 is in plain text and the item name is "1", which I created with the item management software. [...
Chrischi's user avatar
1 vote
0 answers
64 views

can't detect the archtitcture of a file

i extracted a file from a .JPEG with outguess the file extension is .data i tried to identify the file type but the result is application/octet-stream and i can't figure which extension is it even ...
med najjar's user avatar
2 votes
0 answers
218 views

Source code for an mp3 player?

I know this title sounds a little dumb but if you would please bear with me for an explanation. I have a Valoin-made mp3 player I bought close to 3 years ago now. Via a series of interesting ...
PixelBlurb's user avatar
3 votes
1 answer
378 views

Reverse engineering Roland TR-8S kit file format .t8k

I'm trying to figure out the file format that the Roland TR-8S drum machine uses for importing/exporting drum kits. My goal is to replace the sample (PCM) data within a kit. It's a proprietary binary ...
Michael Ganß's user avatar
0 votes
2 answers
649 views

Open unknown image format (probably a RAW image)

I copy image files here from a linux based system which ends with .bin. Unfortunately I don't know how to open it. The goal is to convert images to this format later. What I have already tried: Open ...
Alonia's user avatar
  • 83
1 vote
0 answers
152 views

What type of file has the file signature 'BOOT'?

I have a .bin file which I am trying to disassemble into something that I can edit. Given that binary files can contain just about any binary data, I found it difficult to assess what file data is ...
Xiddoc's user avatar
  • 61
3 votes
1 answer
1k views

Advanced Binary Exploitation CTF

I wanted to ask your assistance: Where can I find advanced ctfs (that hopefully contain solutions) regarding binary/kernel exploitation? I am interested on finding x86_64 linux/windows/arm64 that ...
BegiNO's user avatar
  • 56
0 votes
1 answer
2k views

decryption of firmware file from modem/router Speedport Plus (Sercomm not ZTE)? [closed]

Although I have no hope really I will leave this here in case someone has the ability and time to help. This is from a modem/router widely used in countries like Germany, Greece and others from ...
N.K.K.'s user avatar
  • 9
2 votes
1 answer
3k views

Extracting the contents of an unknown file format

I need some help and advice here. I'm self-learning how to reverse engineer a file content of an unknown format. Here's the content of two files: E5 44 2A F9 1C 72 96 B9 CA B2 40 33 DA 19 B9 56 C4 5F ...
hmiguel's user avatar
  • 121
3 votes
3 answers
2k views

Reverse engineering a partially known binary format

I have files with binary data, the format description of them is very vague and incomplete. E.g., it states that records start with header byte, like (hex) FA, followed by datetime (accurate down to ...
S. Kalabukha's user avatar
0 votes
0 answers
426 views

reversing xiaomi update firmware encrypted?

I am playing around with a xiaomi firmware [mijia_4k_0.6.16.02] for a camera Running binwalk on the file I see this output DECIMAL HEXADECIMAL DESCRIPTION ----------------------------------...
btoinosis's user avatar
3 votes
2 answers
1k views

Reverse engineering a checksum algorithm

I am attempting to implement an editor for a discontinued hardware drum synthesizer which uses undocumented system exclusive MIDI messages for communication. I've figured out the patch format, but I ...
user2390115's user avatar
1 vote
1 answer
248 views

Deciphering an unknown graphics format

For my own amusement, I dumped the files of an old Nintendo DS video game I have (the company has long since gone bankrupt/closed) and am trying to extract the assets. I have recovered game text, ...
SoItBegins's user avatar
2 votes
0 answers
107 views

How do I decode arbitrary data from a raw extracted binary?

I have a IoT scale that stores my measurements into records and passes them onto my phone. I was able to read directly off a flash chip and create a binary file. The chipset is ARMv7. I want to be ...
ArtificialAmateur's user avatar
1 vote
2 answers
7k views

Extracting the contents of an unknown archive file format

I need some help and advice here. I am privately learning on how to reverse engineer our teachers custom file archive file that have other files stored inside of them. for school project. But, I am ...
markkk's user avatar
  • 21
9 votes
1 answer
1k views

Need help to reverse engineer a dog collar transmitter

I have a Petrainer PET998DRU shock collar (similar to this one) that got partially chewed up by the dog it is supposed to train. I salvaged it to the point where I have the following buttons: Mode (...
dreed75's user avatar
  • 93
1 vote
3 answers
5k views

What to do with .dd files? [closed]

Okay so I am doing picoCTF and I am very new to ctf. Now in one of the questions I am given a .dd file and the hint says Some files have been deleted from the disk image, but are they really gone? I ...
mzfr's user avatar
  • 19
2 votes
1 answer
140 views

Can't identify checksum type in unknown RS485 protocol

I need to reverse a RS485 protocol in order to extract some values for further usage. Unfortunately only these few messages are available at the moment. They repeat continuosly. Only in special ...
Freddy Manila's user avatar
4 votes
1 answer
3k views

What are the steps to reverse engineering a Shockwave .DCR file?

I have been fascinated by reverse engineering after making several emulators and finding the pret community. I love the idea behind decompiling old games and recreating source code that recompiles ...
user2936448's user avatar
0 votes
1 answer
155 views

How can I tell if a virus was made by Russians? [closed]

I have been looking around quite a bit on the internet for something that could tell me more than basic section on a binary. I have a PE file and usually I see just what compiled it (MSVS or GCC ... ...
LUser's user avatar
  • 793
0 votes
1 answer
79 views

How to find out where an application stores the resolutions it allows?

Many applications (in particular most games) offer a set of resolutions to choose from. Some of them are pretty open and allow basically every resolution the underlying system seems to be capable of, ...
Wanderer's user avatar
  • 103
1 vote
1 answer
62 views

How could colors be encoded in these values?

I've got a number of colors which I'm trying to reverse engineer from a binary blob. I've narrowed it down to a small section of the file, with the following values: c[(0,0,0)] = ...
ndawson's user avatar
  • 73
0 votes
1 answer
93 views

What is the format of this time?

I'm trying to interpret a bunch of bytes I'm receiving from a GPS tracker. There are 3 sequential bytes that I believe mean hours, minutes and seconds. I recorded timestamps along with the messages I ...
Gustavo's user avatar
  • 103
13 votes
0 answers
562 views

Problems calculating checksum for AirConditioner

I am trying to reverse engineer an AC Indoor unit <-> thermostat communication. So far I've succeeded in parsing the bits and bytes. I discovered that the upper and lower nibbles need to be ...
stinger151's user avatar
0 votes
1 answer
3k views

.bin files Firmware

I'm looking for help in analyzing a few .bin files. I have a program that installs a "firmware" update when I connect my camera through USB. I'm on a Mac Os Sierra. Inside the Applications Folder ...
Davi Silveira's user avatar
3 votes
2 answers
508 views

Interpret binary format of matrix files provided (*.mtx)

I can't figure out exactly how these binary matrix files are formatted, other than the 2 little-endian 32-bit unsigned integers in the header. Supposedly the following is a 3x3 identity matrix: 0300 ...
Patrick Roberts's user avatar
3 votes
1 answer
845 views

Reverse engineering serial communication CRC algorithm

I'm working on reverse engineering the serial communication protocol of an obsolete electronic control system, but I'm having trouble figuring out the CRC algorithm and polynomial. I have reverse ...
John Voltz's user avatar
3 votes
1 answer
263 views

reverse engineering file containing time series data

I have to decode a proprietary file format which mainly contains time series data. The only thing I was told was that the content is 'zipped', although I am not sure whether it is really zipped or ...
izibe's user avatar
  • 31
3 votes
0 answers
832 views

Reverse Engineering a 16-bit CRC algortihm

I have a set of data bytes and their CRC values available to me. I want to know the CRC algorithm used by it. CRC is 16 bit long. firstly I tried to find out using CRC RevEng but that is showing "...
Roy4u's user avatar
  • 31
3 votes
0 answers
648 views

Reverse Engineering SCE .pkg Files

To elaborate, I need help decompressing SCE (Sony Computer Entertainment) .pkg files. I've found several common patterns between multiple versions of the same file (released over the span of two years ...
JRM's user avatar
  • 31
2 votes
1 answer
94 views

Unkown Swap Encoding

I'm trying to figure out this encoding in malware.. All I have are the static strings.. I was able to figure one out so there is plaintext on one: e-snAetgrU$ translates to $User-Agent Here are ...
Chris Hall's user avatar
3 votes
0 answers
1k views

Radio Signal 433.92MHz ASK OOK modulation, encoding?

Considering a key fob for RKE (remote keyless entry, automotive) its signal has been captured: It sends at 433,92MHz simple on/off. Following I regard the deltas (time differences between on-off or ...
pas-calc's user avatar
16 votes
2 answers
3k views

Decoding an unknown image format with "DREK" signature (*.drk)

There are some unknow images, which I would like to decode to RRGGBBAA format. It was a really hard work, but at the moment I can somewhat understand, that which part of the binary is responsible for ...
Iter Ator's user avatar
  • 214
6 votes
2 answers
2k views

Determining CRC algorithm (16 bit?) over RS-232

I give up.... I've tried for two years to determine which CRC algorithm is being using over an RS-232 serial connection between two pieces of equipment. The equipment dates from about 2002. I'm only ...
Enrico Biscotti's user avatar