Questions tagged [binary]

Files with machine code directly readable by the CPU or the interpreter. It encloses any executables, libraries, object code or memory dump of the analyzed software.

Filter by
Sorted by
Tagged with
2 votes
0 answers
22 views

Trying to understand a simple compiled PSI binary file

I was working with an old ios game, and found that it saved most of its data (players, worlds, anything in-between) in MDB files.. titled data.mdb and lock.mdb. There is a pair for every object type (...
user avatar
1 vote
0 answers
37 views

Where can I find these compilers given in the Rich Header of a system BIOS file?

I am working on a project which deals with the BIOS file of a well known manufacturer. I recovered the file from the disk partition which stores and uses the file in case BIOS is corrupted or its ...
user avatar
  • 223
0 votes
0 answers
31 views

Pattern search for binary data

I know that I can use regex to search binary to find magic byte sequences. But I want to have something more sophisticated and versatile to perform the search like: if there's dword which is non zero, ...
user avatar
  • 1,750
0 votes
1 answer
81 views

Need help with this .tbl file

I don't know if it's encrypted, but I tried changing encoding to latin1, but no avail, some text are still not clear, file looks to be like a csv table. Plus, it has a FTABLE as a header, I don't know ...
user avatar
0 votes
2 answers
114 views

Changing the jne to je instruction causes program to generate error

I'm trying to change the instruction from jne to je I've change an instruction 75 0c jne [some_location] 75 0c is a 2 jump instruction. So, I've a chaged it to from 75 0c to 74 0c which is ...
user avatar
1 vote
0 answers
30 views

nrf52-based localization tag flash dump and modification

Lately I've bought a localisation tag (Apple AirTag alike). When I click a button on my cell phone, the device plays a chiptune-like ringtone. The ringtone is configurable using the app and stored on ...
user avatar
  • 11
1 vote
1 answer
50 views

How To Access Predefined Class Attributes From IDA Pro After Loading The Binary Without Debugger Attached To Process [closed]

I have this class with constructor offsets and attributes: public class example { // Fields public float Attribute_1 = 1.5f; // 0x8 public int Attribute_2 = 102 ; // 0xC // RVA: ...
user avatar
  • 21
0 votes
1 answer
690 views

How to exploit __isoc99_scanf with a segmentation fault

I'm an absolute newbie when it comes to all this side of reverse engineering. Each time I try and understand it, I get lost almost immediately. I am trying a lab. I open it up in Binary Ninja. I get ...
user avatar
  • 221
0 votes
0 answers
77 views

Reverse Engineering CHALLENGE

I have a BIN firmware archive file starts with 04 02 which is unknown to me what makes me sure it is an archive file is the source I got it from BINWALK and all other known tools failed to identify ...
user avatar
  • 1
1 vote
1 answer
160 views

Binary diff + patching across versions

What are the current options for binary patching which works across different versions of the binary? E.g. we created a binary patch for a specific version of a binary and want to apply that patch to ...
user avatar
1 vote
1 answer
83 views

What is data only exploitation?

I was wondering, and after trying to read for the past several months I got totally lost and don't understand this concept. Could someone please explain in simple words the concept of data only ...
user avatar
  • 11
0 votes
0 answers
36 views

Changing variable in firmware.bin of UVC web camera

Just to note I am complete noob, and my plan might not even be possible. If that is the case that is fine, but I like to think everything is possible and at least try. I have a UVC webcam that has ...
user avatar
0 votes
1 answer
74 views

When patching static software, is there a preferred patching strategy?

Suppose you have something like this (in x86-like asm) 10 | mov ebx 1 // good response from function "check" below 20 | call check() // modifies eax 30 | test eax ebx 40 | jeq good 50 | bad: ...
user avatar
  • 177
0 votes
0 answers
127 views

Extract smartwatch firmware bin file

I'm trying to extract files from a bin file that's the firmware of a smartwatch. I tried using binwalk -Mre firmware.bin but got no files, this is the result: How should I extract/modify this bin ...
user avatar
1 vote
0 answers
181 views

How can I flash unpacked firmware into Alcatel MiFi?

I bought Alcatel MW40V from Vodafone Shop some weeks ago and I can't access USSD Codes within Web UI. Bus 001 Device 008: ID 1bbb:0195 T & A Mobile Phones Alcatel OneTouch L850V / Telekom ...
user avatar
  • 111
1 vote
2 answers
491 views

Is it possible to reverse CGI binary file?

I wanna reverse CGI binary file. Is it possible? What are the recommended tools and guides? Thank you for reading my question. $ file test.cgi status.cgi: ELF 32-bit LSB executable, ARM, EABI5 ...
user avatar
0 votes
2 answers
182 views

Open unknown image format (probably a RAW image)

I copy image files here from a linux based system which ends with .bin. Unfortunately I don't know how to open it. The goal is to convert images to this format later. What I have already tried: Open ...
user avatar
  • 73
1 vote
1 answer
254 views

IDA Pro, How to forcefully disassemble "mips 32" instead of "mips 16"?

While disassembling a mips binary, IDA Pro attempts to disassemble into mips 16 mode, even though It's mips 32 ISA. Below is that code snippet. .text:XXXXXXXX .set nomips16 # <= ?? .text:...
user avatar
  • 123
0 votes
0 answers
186 views

Loading a U-Boot ARM flash image into IDA Pro

I have a U-Boot image file which was extracted from flash memory of a board with an Hi3520D ARM CPU. I would like to load this file into IDA Pro and dig out the password that is required for accessing ...
user avatar
  • 31
1 vote
0 answers
106 views

What type of file has the file signature 'BOOT'?

I have a .bin file which I am trying to disassemble into something that I can edit. Given that binary files can contain just about any binary data, I found it difficult to assess what file data is ...
user avatar
  • 61
0 votes
0 answers
90 views

Reversing Windows binary to find where the error is with Ollydbg

I've some experience with gdb and debugging in Linux environment (I'm studying computer science at University and I'm able to handle bof in Linux). The problem now is on a Windows program. I start it ...
user avatar
  • 1
2 votes
0 answers
209 views

How to get the functions that call or access a string in Binary Ninja?

I am reversing engineering a program. Right now I was using Hopper. With Hopper once I find a string I can right click and I have an option call "References to ..." that will return a list ...
user avatar
  • 476
1 vote
1 answer
341 views

How to write these 4 example x86 assembly instructions in opcodes, according to the Intel docs?

Okay so I have been studying Chapter 2 of Volume 2 of the Intel Manuals. I have as best an understanding as I can get of the ModR/M byte, the REX byte, the SIB byte, and the general instruction ...
user avatar
  • 153
0 votes
1 answer
587 views

Advanced Binary Exploitation CTF

I wanted to ask your assistance: Where can I find advanced ctfs (that hopefully contain solutions) regarding binary/kernel exploitation? I am interested on finding x86_64 linux/windows/arm64 that ...
user avatar
  • 26
0 votes
0 answers
39 views

What exactly does the selectnbrecv function from Golang do?

I'm reverse engineering a Golang binary and came across the function selectnbrecv. However, I don't understand the documentation. I'll appreciate it if someone can explain to me the context and ...
user avatar
  • 257
0 votes
0 answers
487 views

Decoding messages sent/received by Python websocket client

I am using the websocket module for my client in python3, and I am trying to troubleshoot some errors I am getting that lead to the client disconnecting after seemingly random intervals. When I ...
user avatar
2 votes
0 answers
124 views

Advice for retrieving functions and tables from Intel 8061/8065 bin file (reverse engineering) from Ford EECV ECU

I have under my disposal some Ford EECV bin files and my goal for the next few weeks is to retrieve the functions and tables, and plot them out before going onto DIY hardware. Does anyone know which ...
user avatar
  • 21
0 votes
1 answer
129 views

How do i identify parameters function of md5sum of specific binary?

So, i downloaded the binary. Here are some details before moving forward: revbinary: ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2,...
user avatar
0 votes
0 answers
702 views

Modify Strings in a ELF (Executable and Linking Format) that are stored in the .rodata

I have 2 ELF files here, each containing strings in the ".rodata" for an translation that I want to modify. The first ELF "(binary1)" I have already successfully modified from ...
user avatar
  • 73
1 vote
1 answer
1k views

How to open new window of decompiler or resize the decompiler of Ghidra?

This is very small and inconvenient to read. How do i open new Window (any shortcut key) or resize it, for some reason i cant resize. Any help? EDIT: Oh thanks Shane Riley, i clicked the blue button ...
user avatar
0 votes
2 answers
173 views

Reverse engineering unknown binary data of .Factory file for Simplify3D

To keep a long story short I'm in the process of trying to reverse engineer the .factory format this program called Simplify3D which is a 3D printing software slicer. I love the software but ...
user avatar
1 vote
0 answers
136 views

Determining the encoding of an unknown image format [closed]

I'm trying to reverse engineer a REST API and there is an endpoint that delivers images. Some of them are jpegs but other ones look like they're base64 encoded, except they don't appear to be, as they ...
user avatar
0 votes
1 answer
464 views

How do you extract all the text from this hex dump?

I am currently ripping the game from a .bin file, that contains all the system text. I have searched through the file and found text in Spanish, French, English, and in Japanese. The problem is that ...
user avatar
  • 21
12 votes
0 answers
989 views

Extracting strings from Go binaries

Is there an easy way to extract all of the strings from Go binaries that will work cross architecture? The problem with Go is that strings are stored without a null terminator, so you can't use the &...
user avatar
  • 221
0 votes
0 answers
116 views

Combine two ELF binaries

Without having access to the original source code, is there a way to combine two ELF binaries with the main() in the first binary pointing to the main() in the second binary ? In other words, I mean ...
user avatar
  • 126
13 votes
2 answers
5k views

What are some ways to pass raw bytes to a program via the Linux terminal?

I want to pass raw bytes to a (C) program using the Linux Bash shell. I find that when I try to pass for example "\x00\xFF\xAB", the program receiving the input actually gets the ASCII character codes ...
user avatar
  • 1,625
1 vote
2 answers
864 views

Trying to rip the sprites of this game

I am currently trying to rip the sprites from an Nintendo DS game called Cookie Shop - Create Your Dream Shop but they are all in _LZ.bin files. When I've unpacked its compression, I could see lots ...
user avatar
  • 21
0 votes
2 answers
199 views

signed and unsigned integers as bits in memory

I am looking into making a memory scanner for values an while doing some research I came across this the piece of information that unsigned integers allocate all 8 bits for the number while signed ...
user avatar
  • 7
0 votes
1 answer
91 views

Encrypted image format

I am trying to reverse a simple image format for bitmap data with an indexed colour palette. The structure of the file is generally clear and I am able to extract the size of the picture and the ...
user avatar
1 vote
1 answer
176 views

empty .data section in AARCH64 elf binaries

My question is: Why does readelf -x .data bin.so give me empty data when ghidra does not? (0x00 repeated for section length until last element 0xFFFFFFFF). ghidra/JEB contradict me by showing that ...
user avatar
2 votes
1 answer
86 views

Is there a standard documentation format for file formats?

I'm analysing an undocumented file format. Is there a standard documentation format for file formats I can write up? Something of this level of complexity and detail? What I have in my mind is, !...
user avatar
  • 177
1 vote
1 answer
79 views

Is there a handy assembly to mock app conversion tool?

It might be too silly of a question, but here you go. Suppose you have some software that contains a tricky nested assembly sequence (like this one) you try to reverse engineer. brain*[pen&paper] ...
user avatar
  • 177
0 votes
0 answers
35 views

Is there a list/property of the vulnerabilities so that, if pentested for, can read but not overwrite the system?

The question is a bit hard to explain, so I go with an example. Suppose the UFO crashed on Earth. The aliens are dead, but their on-board computer is intact. You were tasked to dump the computer's ...
user avatar
  • 177
0 votes
1 answer
137 views

Is it possible to extract the binary firmware of a feature phone? [closed]

I am new at reverse engineering but very eager to learn. I have a feature phone it5081 and downloaded it's binary firmware. I have googled and came to know about tools like binwalk,firmware mod kit as ...
user avatar
2 votes
1 answer
107 views

Finding "func main" in a stripped binary written in GO

I'm reversing a binary that was apart of a CTF I was involved in about a month ago. It was too large of a binary to do during the challenge so I am doing it now. I am having trouble finding the main ...
user avatar
6 votes
1 answer
507 views

How does IPA decryption works?

All IPAs being downloaded from AppStore gets encrypted on servers as part of FairPlay DRM. But decryption is accomplished on local device. As far as I know there is some hardware module which contains ...
user avatar
  • 161
1 vote
1 answer
821 views

IDA and flirt signatures

I have 2 binaries, with the same CPU architecture. I made a flirt signature file - first used IDB2PAT on the first idb, and then sigmake to produce the actual signature file out of it. I put the ...
user avatar
4 votes
1 answer
681 views

Radare2 ptrace can not attach

First my setup: Linux Mint 64bit 4.15.0-20-generic radare2 the newest version from github /etc/sysctl.d/10-ptrace.conf = 0 Executable: ELF 64-bit LSB executable, x86-64 read write and ...
user avatar
3 votes
2 answers
766 views

Translating a Korean Exclusive PS2 game ~ hangeul encoding?

I got my hands on a copy of Mystic Nights, a survival horror game for the PS2 realeased exclusively in Korea. The game's text is all in Hangeul (Korean writting system). I extracted the ISO and ...
user avatar
  • 43
3 votes
1 answer
2k views

How to extract DVB firmware bin file?

I have a bin file of DVB (DTH) box firmware. I want to change one image inside that bin file, how I can do this? Please guide me in right direction. I tried bin walk, but the file that it extracted ...
user avatar