Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 26204

Interactive Disassembler Professional (formerly IDA Pro), a proprietary multi-platform disassembler by Hex-Rays.

6 votes
1 answer
2k views

Reversing an RSA function throws pkcs decoding error

I'm working my way through reversing a toy challenge, and I find myself stuck. The app is pretty simple, it spits out a blob of text (e.g. "3b880a90e476d66569d9d5dfb5cd755af3f..."). Dumping the code, …
XeroxDucati's user avatar
5 votes
3 answers
1k views

Nested Structures in IDA

I'm trying to figure out how to explore structs in IDA, and getting stuck on the basics. … kBits = 1024; const int kExp = 3; RSA *rsa = RSA_generate_key(kBits, kExp, 0, 0); RSA_print_fp(stdout, rsa, 0); RSA_free(rsa); return 0; } Then I imported the OpenSSL headers, so IDA
XeroxDucati's user avatar
4 votes
2 answers
165 views

Reversing rodata

I'm playing with an ELF binary to learn IDA, and I'm not sure how to interpret what I'm seeing.. …
XeroxDucati's user avatar
2 votes
1 answer
110 views

IDA mov dword ptr with non-existent addresses

I opened a random .so library to poke around and learn IDA a bit better, and I hit something I've never seen. … IDA has these instructions: mov eax, [esp+4Ch+ptr] mov dword ptr [eax], 665F6165h mov dword ptr [eax+4], 6C615F66h mov dword ptr [eax+8], 3A776F6Ch mov dword ptr [eax+0Ch], 61736964h …
XeroxDucati's user avatar
2 votes
0 answers
88 views

Tracing odd variant of call analysis failed

Weirdly that same call happens multiple times before the line causing the error, and it seems IDA is ok with those invokes. … text:00033AFA mov dword ptr [esp], 3 .text:00033B01 call log_dispatch .text:00033B06 jmp loc_339EC Seems obvious it's doing some logging, and IDA
XeroxDucati's user avatar
1 vote
0 answers
930 views

IDA 7 handling strings in debugger pseudocode

When running a remote debugger to a linux server, is there a way to get IDA (7.0) to properly handle strings? … When I go to the pseudocode view, I get things like this; v7 = sub_804AD60((std::string *)&v16); char *v5; So clearly IDA has some handling of string types, and it's able to infer that one of these …
XeroxDucati's user avatar
1 vote
Accepted

Reversing an RSA function throws pkcs decoding error

Turns out if you're gonna get hex strings printed to console, you have to convert them back to a binary char array before decrypting..
XeroxDucati's user avatar