Questions tagged [patch-reversing]

Understand software updates only-based on binary patches by reversing it and analyzing the differences between old and new version of the software.

Filter by
Sorted by
Tagged with
0 votes
0 answers
121 views

APK/Apktool If I decompile and recompile sources the app does not start

I'm trying to reverse an apk but there is a strange thing that happens, probably something new for me, basically if I decompile only the resources (not dex files) and recompile it zipalign/sign, the ...
zwave's user avatar
  • 1
0 votes
0 answers
36 views

how to set a BP on button in SunAwtCanvas in x96dbg

I'm trying to debug a program in x96dbg that I think this is written in Matlab. There is no string related to buttons or something interesting. Then I go to Handles tab to find buttons and set break ...
owl's user avatar
  • 1
1 vote
0 answers
77 views

Is a jailbroken iPhone is necessary to extract the ipa of a pre-installed app like iMessage?

My research notes: https://docs.google.com/document/d/1Y-2SZX4s1E1Mq9yWHZMMBzW3BJTfUuMl-YYXoZlY73w/edit?usp=sharing From my research, I have come to the understanding that in order to extract the ipa ...
rasputin's user avatar
2 votes
2 answers
257 views

Reverse engineer a calculation rule from a video game

I have recently bought an economic simulation video game, but neither the docs not the game UI describe how to estimate some costs; the user needs to actually invest and spend their money, then ...
devio's user avatar
  • 121
3 votes
1 answer
241 views

How to call Windows console in ASM and printf some values there?

Is there a working way to embed the windows console in disasm code? I tried AllocConsole with GetStdHandle or AttachConsole with PID of an existing console but it didn't work. I have tried printf ...
EvilCracker's user avatar
2 votes
0 answers
97 views

Reverse engineering engine room simulator license management (x32dbg)

folks, I'm marine engineer and recently got in touch with simulator software with my professor at the Simulator Department of my university. Today I thought we could dump the original installation and ...
Vryashi Hyashi's user avatar
2 votes
1 answer
349 views

Changing Offset Value with frida

So I found this offset in ghidra, and I want to change that offsets value in Frida with this picture I have deduced that the offset is 0x6ae210 What I want to do with this is change game....
Rebel Gaming's user avatar
1 vote
0 answers
54 views

Reversing Executable Package

I have an .exe file that loads some other files when executed, I need to redirect these files and export them. When debugging I know that there is a subfolder /images/%s.png where the files in ...
Lucas Nunes's user avatar
2 votes
2 answers
429 views

HEX code to call DLL function

I'm working with 2 third party DLLs (let's A.dll and B.dll), which I don't have the source code, only the compiled DLL. I know A.dll uses the main function from B.dll, and they both works perfectly. ...
VIRGO's user avatar
  • 23
0 votes
0 answers
150 views

Game Hacking Prevention - General Question

So I'm in a middle of developing an online video game for Windows and was wondering, how does games' hacking is even possible? I mean, assuming I calculate the HP and the location of every player in ...
NewGuy's user avatar
  • 1
1 vote
0 answers
821 views

Can't Find hex Value from X64dbg in hex editor

I want to make a simple patcher for exe , so here is the original hex value from the x64dbg before any modify : I took the hex value and searched for it in the hex editor ,but can't find any . So why ...
Colin Jack's user avatar
1 vote
0 answers
263 views

Bypassing unsupported android TV box!

I have an android TV box called Proximus decoder v4, anyway the android TV box is not supported anymore by the company. When I turn it on I get an update checking, you can't even cancel it, and then I ...
Zakaria Halloumi's user avatar
0 votes
0 answers
44 views

There is a course in which they teach you to use WinAFL?

I would like to know if there is a course that begins in a basic way, such as how to use winAFL to find bugs in app desktop.
Jhon's user avatar
  • 9
-1 votes
1 answer
399 views

Call function more times with other args

I want to call the same function more times but with other args, I can't add new instructions, so how can I call it?
Jorr1's user avatar
  • 1
0 votes
0 answers
182 views

Why won't Radare2 display main's paramethers of a 32bit ELF on a 64 bit machine?

I am new to reversing and currently trying to follow this tutorial, in which the binary provided was compiled on a 32 bit machine hence the file is a "ELF 32-bit LSB executable". It runs ...
Yuran Pereira's user avatar
0 votes
0 answers
3k views

Reverse exe file compiled by pyinstaller

I am trying to get python source code from only exe file compiled by pyinstaller. I used the pyinstxtractor.py and got extracted folder. And then what or how should I do? Or could you explain other ...
jis0324's user avatar
  • 101
0 votes
1 answer
880 views

Static Binary in Windows

I am learning more about binary exploitation on windows. But I saw while revering a binary that you can create static binaries in windows too just like in Linux. It was really ugly. if I would be on ...
lucky thandel's user avatar
0 votes
0 answers
292 views

capture traffic of an android app

I was trying to test and intercept traffic from an app developed on Rhodes open source framework, I setup a proxy with burp, and of course I have installed burp certificate on my device hence I can ...
hanan's user avatar
  • 309
0 votes
0 answers
261 views

Can I reverse engineer a DLL file and add SEH or some error handing codes to it?

I am using some DLL files in my Java application using JNI library. The dlls are not written by me and I do not have access to their source codes. They are so buggy and throw lots of exceptions. ...
Iman Nia's user avatar
  • 229
0 votes
1 answer
142 views

ARM7 32-bit Branch Offset Calculator

I need to patch an arm7 program by replacing this fopen function by another function. .text:00018D68 52 D7 FF EB BL fopen ... .plt:0000EAB8 ; FILE *fopen(const ...
john's user avatar
  • 13
1 vote
0 answers
172 views

Replacing bytes from start of every function with IDA Pro

I want to fix a .plt segment in IDA Pro by replacing 12 bytes from start of every function in the .plt segment with the ones I specify. I want to just make each function return so I'm replacing ...
Ronny's user avatar
  • 73
3 votes
0 answers
157 views

How to see what has changed in a patched binary?

I am exploring MacOS Deckset app. It has a trial version available on the official website. But there's a cracked version available on torrent trackers. I want to know what was changed by the people ...
Revengo Engineros's user avatar
-1 votes
1 answer
149 views

How can I analyze this code? [closed]

I wanted to analyse the code for some functionality. in my understanding the code contains a logic handling intents with extras. I want to know how these Works! and also how can I pass extras using ...
hanan's user avatar
  • 309
-2 votes
1 answer
239 views

How to reverse engineer apks? [closed]

is it possible to reverse engineer an apk just to unlock hidden/unreleased features?
hanan's user avatar
  • 309
1 vote
2 answers
808 views

Decrypt application protocol packet

I have several applications that interact with the network, but the data is encrypted. I set breakpoints on send ws2_32.dll and found the correct buffer in which the encrypted data was located (then I ...
Polar Bear's user avatar
-1 votes
1 answer
136 views

Force debug Administrator Malware

I want to analyse a malware that do not run without administrative previliges. I know it is risky but still. How can I debug it with debugger as from entry point? Because debugger could not start ...
Parampreet Rai's user avatar
0 votes
1 answer
1k views

Patching memory

I've successfully reversed and patched an application on windows, but patching the executable on disk triggers a CRC check and prevents it from loading. I've used x64dbg and have the addresses I need (...
Seyed Amin's user avatar
-1 votes
1 answer
4k views

Change androidmanifest.xml file within apk

I am able to unpack an android apk file with apktool, but when I am repacking the apk file using apktool, it just crashes with errors, and ibotpeaches seems not patching those errors for years. Now ...
hanan's user avatar
  • 309
2 votes
0 answers
98 views

Trying to replicate encryption of an android app

I was trying to replicate/copy the encryption of an android app which uses CryptoJS with sha256 encryption as having seen in the source code of the android app. fingerprinting the app, it was built ...
hanan's user avatar
  • 309
0 votes
1 answer
1k views

Android app crashes even while not edited, how can I solve it?

Installed an application from google playstore and then transferred to it my computer to apparently edit it and without any changes I made to it then I tried to install it through ADB, well the ...
hanan's user avatar
  • 309
3 votes
1 answer
591 views

How can I retrieve the encryption key in this code?

can anyone explain the following code? is it possible to retrieve the encryption key? I think the code was heavily obfuscated in addition to obfuscation, I can recognize it is using algorithms like ...
hanan's user avatar
  • 309
1 vote
1 answer
791 views

Unable to intercept traffic of an android app even after patching ssl pinning

Recently, I was trying to test an app developed on Rhomobile, I setup a proxy with burp, and of course I have installed burp certificate on my device hence I can intercept other apps on my device but ...
hanan's user avatar
  • 309
1 vote
0 answers
1k views

Pe file Vmp0 vmp1 section,

I have a PE file with section vmp0 vmp1, possible protected with VMProtect. I am using local debugger in IDA pro, the program will detect the debugger and pop-up an message box and quit , I used the ...
Silicon Creature's user avatar
0 votes
1 answer
106 views

Easy way to understand vulnerable functions while Reversing [closed]

I have been doing reversing lately and not an experienced Reverse engineer. Mostly I do audit on binaries both fuzzing and source code. As I am new to this stuff, I am getting some issues of ...
Bikash Dash's user avatar
4 votes
1 answer
2k views

Hooking function with frida

How can i hook functions with frida? Can someone give me an example please, for something that do that? Hook at 0x412312 and change the assembly code to "mov eax, 999" I Arleady tried something like:...
yoni's user avatar
  • 59
2 votes
2 answers
1k views

Does the loader fill the IAT table of an .exe in load time by checking the corresponding export tables or during run time?

I came upon this question : Can we hook the Nt or Zw functions using IAT hooking, or just inline hooking? and it got me wondering, lets say for some reason some function was not in the IAT of our ...
Max's user avatar
  • 99
3 votes
2 answers
1k views

In reverse engineering, what does it mean to "patch a file"?

I've been solving some crackmes, and every file that I download, in the "instructions" says: "Patching is obviously not allowed". What does that mean? And how does one patch a file?
unc4nny's user avatar
  • 79
0 votes
0 answers
91 views

How to execute an import exe/dll from memory

i dumped a exe/dll file from the memory with OllyDumpEx, now i understand i need to fix the address or something like this to use the dll or to run the exe, so how can i do that?
Yoni's user avatar
  • 21
2 votes
1 answer
1k views

Change instruction test eax, eax to text eax, 1

I'm trying to change an instruction in assembly. Try with test eax, eax to test eax, 1. I try modify the opcodes. For example opcode of test eax, eax: 85c0 Try to understand why is 85c0 with this ...
felix89's user avatar
  • 23
0 votes
2 answers
2k views

Find flag from GO binary challenge [closed]

I have GO binary file from challenge (that already over). I spent around 3 days to find the flag without results. I'm trying to load the file with gdb and using the following command: First, Trying ...
user28772's user avatar
1 vote
1 answer
548 views

Not able to find Hard coded strings in the mac executable file

I know that there is a string called "Activate your subscription" used in this particular app. But Im not able to find this string from its executable. I tried strings myapp and also searched for same ...
Jaffer Sheriff's user avatar
1 vote
0 answers
235 views

Need help understanding basic buffer overflow

So I have this sample problem that I need to buffer overflow. Its an elf file that require to be run on a separate terminal then using "nc localhost 'port' " on a separate terminal we can see the ...
Omar Elgafri's user avatar
0 votes
1 answer
370 views

Calculate LEA operand

I have those opcodes on 64 bits: 48 8D 35 45 CE FF FF >>> lea rsi, [rip - 0x31bb]. How can I get the 0x31bb value from those opcodes and how can I know if I have a + sign or a - sign ...
Maco's user avatar
  • 3
1 vote
0 answers
293 views

Patching an app that updates frequently

Hello i am working with an app coded in c# which updates very often usually within 2-3 days or sometimes every 12 hours The updates are really needed for the app to work So i was wondering what can i ...
Hashim Roja's user avatar
2 votes
1 answer
299 views

Has there been any success in using deep learning for reverse engineering?

So has there been any success in using deep learning for doing reverse engineering? i couldn't find anything useful other than some theoretical papers, so was there any talk about this in recent ...
John P's user avatar
  • 207
2 votes
1 answer
755 views

find a dialog in ida using resource hacker

I am having difficulties finding the dialog reference in IDA. e.g. i can trace a dialog in "resource Hacker" or "PE Explorer" which looks like this: 5035 DIALOG 0, 0, 295, 163 STYLE DS_SETFONT | ...
dandan's user avatar
  • 275
0 votes
2 answers
219 views

Monitor all changes done by function

What is the easiest way to track all changes before and after a specific function is executed. I know I can trace instruction but that may yield a long list of all command executed. I want to stop the ...
dandan's user avatar
  • 275
1 vote
2 answers
707 views

IDA PRO - compare running process

I have a software which writes some data to specific location in memory depending on user choices. Say i can have 2 choices, A & B. I want to run IDA, set option A and save all the data, then run ...
dandan's user avatar
  • 275
0 votes
1 answer
250 views

immediate value change when start debugging

I patch the code for my work. I have a problem with code patching. I use IDA pro 6.8. I added code like this. (Assembly) (Hex dump) mov eax, 638BACh --> B8 AC 8B 63 00 Not problem ...
임근영's user avatar
1 vote
1 answer
491 views

IDA PRO does miss calls when tracing

I am following this tutorial: enter link description here Though it uses Olly I am following with IDA. Basically i am tying to catch where a popup decision is taking place in the program. I though ...
dandan's user avatar
  • 275