Questions tagged [binary-diagnosis]
Binary diagnosis is the art of understanding the properties of an unknown binary stream of data without any additional information. Usually done as a last resort due to lack of related code to reverse engineer or format specifications. Examples include understanding a network protocol or a file format with only the messages or files available for analysis.
34
questions
2
votes
0
answers
38
views
Find out what is this binary database entry and what format it is
the following varbinary "BUFFER" of a database entry is for an article.
FIELD_0 is in plain text and the item name is "1", which I created with the item management software.
[...
- 21
1
vote
0
answers
63
views
can't detect the archtitcture of a file
i extracted a file from a .JPEG with outguess the file extension is .data i tried to identify the file type but the result is application/octet-stream and i can't figure which extension is it even ...
- 19
2
votes
0
answers
161
views
Source code for an mp3 player?
I know this title sounds a little dumb but if you would please bear with me for an explanation. I have a Valoin-made mp3 player I bought close to 3 years ago now. Via a series of interesting ...
- 21
3
votes
1
answer
344
views
Reverse engineering Roland TR-8S kit file format .t8k
I'm trying to figure out the file format that the Roland TR-8S drum machine uses for importing/exporting drum kits. My goal is to replace the sample (PCM) data within a kit. It's a proprietary binary ...
- 133
0
votes
2
answers
497
views
Open unknown image format (probably a RAW image)
I copy image files here from a linux based system which ends with .bin.
Unfortunately I don't know how to open it. The goal is to convert images to this format later.
What I have already tried:
Open ...
- 83
1
vote
0
answers
133
views
What type of file has the file signature 'BOOT'?
I have a .bin file which I am trying to disassemble into something that I can edit. Given that binary files can contain just about any binary data, I found it difficult to assess what file data is ...
- 61
3
votes
1
answer
1k
views
Advanced Binary Exploitation CTF
I wanted to ask your assistance: Where can I find advanced ctfs (that hopefully contain solutions) regarding binary/kernel exploitation? I am interested on finding x86_64 linux/windows/arm64 that ...
- 56
0
votes
1
answer
1k
views
decryption of firmware file from modem/router Speedport Plus (Sercomm not ZTE)? [closed]
Although I have no hope really I will leave this here in case someone has the ability and time to help.
This is from a modem/router widely used in countries like Germany, Greece and others from ...
- 9
2
votes
1
answer
2k
views
Extracting the contents of an unknown file format
I need some help and advice here. I'm self-learning how to reverse engineer a file content of an unknown format.
Here's the content of two files:
E5 44 2A F9 1C 72 96 B9 CA B2 40 33 DA 19 B9 56 C4 5F ...
- 121
3
votes
3
answers
1k
views
Reverse engineering a partially known binary format
I have files with binary data, the format description of them is very vague and incomplete. E.g., it states that records start with header byte, like (hex) FA, followed by datetime (accurate down to ...
- 43
0
votes
0
answers
394
views
reversing xiaomi update firmware encrypted?
I am playing around with a xiaomi firmware [mijia_4k_0.6.16.02] for a camera
Running binwalk on the file I see this output
DECIMAL HEXADECIMAL DESCRIPTION
----------------------------------...
3
votes
2
answers
797
views
Reverse engineering a checksum algorithm
I am attempting to implement an editor for a discontinued hardware drum synthesizer which uses undocumented system exclusive MIDI messages for communication. I've figured out the patch format, but I ...
- 31
1
vote
1
answer
236
views
Deciphering an unknown graphics format
For my own amusement, I dumped the files of an old Nintendo DS video game I have (the company has long since gone bankrupt/closed) and am trying to extract the assets. I have recovered game text, ...
- 113
2
votes
0
answers
86
views
How do I decode arbitrary data from a raw extracted binary?
I have a IoT scale that stores my measurements into records and passes them onto my phone. I was able to read directly off a flash chip and create a binary file. The chipset is ARMv7.
I want to be ...
1
vote
2
answers
6k
views
Extracting the contents of an unknown archive file format
I need some help and advice here.
I am privately learning on how to reverse engineer
our teachers custom file archive
file that have other files stored inside of them.
for school project.
But, I am ...
- 21
9
votes
1
answer
1k
views
Need help to reverse engineer a dog collar transmitter
I have a Petrainer PET998DRU shock collar (similar to this one) that got partially chewed up by the dog it is supposed to train. I salvaged it to the point where I have the following buttons:
Mode (...
- 93
1
vote
3
answers
4k
views
What to do with .dd files? [closed]
Okay so I am doing picoCTF and I am very new to ctf. Now in one of the questions I am given a .dd file and the hint says Some files have been deleted from the disk image, but are they really gone?
I ...
- 19
2
votes
1
answer
131
views
Can't identify checksum type in unknown RS485 protocol
I need to reverse a RS485 protocol in order to extract some values for further usage. Unfortunately only these few messages are available at the moment. They repeat continuosly. Only in special ...
4
votes
1
answer
3k
views
What are the steps to reverse engineering a Shockwave .DCR file?
I have been fascinated by reverse engineering after making several emulators and finding the pret community. I love the idea behind decompiling old games and recreating source code that recompiles ...
- 143
0
votes
1
answer
155
views
How can I tell if a virus was made by Russians? [closed]
I have been looking around quite a bit on the internet for something that could tell me more than basic section on a binary.
I have a PE file and usually I see just what compiled it (MSVS or GCC ... ...
- 773
0
votes
1
answer
77
views
How to find out where an application stores the resolutions it allows?
Many applications (in particular most games) offer a set of resolutions to choose from. Some of them are pretty open and allow basically every resolution the underlying system seems to be capable of, ...
- 103
1
vote
1
answer
62
views
How could colors be encoded in these values?
I've got a number of colors which I'm trying to reverse engineer from a binary blob.
I've narrowed it down to a small section of the file, with the following values:
c[(0,0,0)] = ...
- 73
0
votes
1
answer
90
views
What is the format of this time?
I'm trying to interpret a bunch of bytes I'm receiving from a GPS tracker.
There are 3 sequential bytes that I believe mean hours, minutes and seconds. I recorded timestamps along with the messages I ...
- 103
13
votes
0
answers
550
views
Problems calculating checksum for AirConditioner
I am trying to reverse engineer an AC Indoor unit <-> thermostat communication. So far I've succeeded in parsing the bits and bytes.
I discovered that the upper and lower nibbles need to be ...
- 131
0
votes
1
answer
3k
views
.bin files Firmware
I'm looking for help in analyzing a few .bin files. I have a program that installs a "firmware" update when I connect my camera through USB.
I'm on a Mac Os Sierra. Inside the Applications Folder ...
3
votes
2
answers
461
views
Interpret binary format of matrix files provided (*.mtx)
I can't figure out exactly how these binary matrix files are formatted, other than the 2 little-endian 32-bit unsigned integers in the header. Supposedly the following is a 3x3 identity matrix:
0300 ...
- 269
3
votes
1
answer
835
views
Reverse engineering serial communication CRC algorithm
I'm working on reverse engineering the serial communication protocol of an obsolete electronic control system, but I'm having trouble figuring out the CRC algorithm and polynomial.
I have reverse ...
- 35
3
votes
1
answer
252
views
reverse engineering file containing time series data
I have to decode a proprietary file format which mainly contains time series data. The only thing I was told was that the content is 'zipped', although I am not sure whether it is really zipped or ...
- 31
3
votes
0
answers
804
views
Reverse Engineering a 16-bit CRC algortihm
I have a set of data bytes and their CRC values available to me. I want to know the CRC algorithm used by it.
CRC is 16 bit long.
firstly I tried to find out using CRC RevEng but that is showing "...
- 31
3
votes
0
answers
629
views
Reverse Engineering SCE .pkg Files
To elaborate, I need help decompressing SCE (Sony Computer Entertainment) .pkg files. I've found several common patterns between multiple versions of the same file (released over the span of two years ...
- 31
2
votes
1
answer
93
views
Unkown Swap Encoding
I'm trying to figure out this encoding in malware.. All I have are the static strings..
I was able to figure one out so there is plaintext on one:
e-snAetgrU$
translates to
$User-Agent
Here are ...
- 123
3
votes
0
answers
1k
views
Radio Signal 433.92MHz ASK OOK modulation, encoding?
Considering a key fob for RKE (remote keyless entry, automotive) its signal has been captured:
It sends at 433,92MHz simple on/off.
Following I regard the deltas (time differences between on-off or ...
- 31
16
votes
2
answers
3k
views
Decoding an unknown image format with "DREK" signature (*.drk)
There are some unknow images, which I would like to decode to RRGGBBAA format. It was a really hard work, but at the moment I can somewhat understand, that which part of the binary is responsible for ...
- 204
6
votes
2
answers
2k
views
Determining CRC algorithm (16 bit?) over RS-232
I give up.... I've tried for two years to determine which CRC algorithm is being
using over an RS-232 serial connection between two pieces of equipment. The equipment
dates from about 2002. I'm only ...
- 121