Skip to main content
6 votes

i need software to decode this subtitle xml file, anyone know what it encodes with?

It's AES encrypted, but fortunately it's pretty trivial to see what's going on in the JavaScript file responsible for decoding ( by using browser ...
user7290573's user avatar
2 votes

How to define a 28-bit integer in Ghidra

I'm not sure what exactly you want, but my best guess that defining a struct with a 28 bits long bitfield is the way to correctly model this.
Florian Magin's user avatar
2 votes

Tips for reverse engineering Common Lisp (SBCL) ELF binary

I would suggest compiling small helloworld type programs then reversing them yourself to identify boilerplate/runtime vs. user code.
Igor Skochinsky's user avatar
  • 36.7k
1 vote

Reverse engineering AES128 Key Derrivation from MAC Address

ELF 32-bit LSB executable, ARM aarch64, version 1 (SYSV) I guess you meant 64-bit ELF, but it's not important. n = 12; // Not sure where 12 comes from, perhaps 2 * number of bytes in a MAC address? /...
wisk's user avatar
  • 1,154
1 vote

Trying to reverse encypter to decrytper in C. Can't figure out what I'm missing

I'd recommend debugging the decryption loop in your code, and the encryption loop in the original binary, side-by-side and comparing the values at each step. It's possible that your binary's rand() ...
Rolf Rolles's user avatar
  • 9,198
1 vote

ELF - Why does objdump provide a wrong byte value in the .got?

When a ELF binary is loaded each one of its sections is loaded to a Virtual Memory Address which is different than its raw offset on disk. Now, objdump shows the contents of the __got's as if it was ...
rotem.salinas's user avatar
1 vote

How to map a decompiled c program back into original source code

Compile the original program with debug information (i.e., tell MSVC to generate a PDB, preferably a full PDB), and then use something like BinDiff or Ghidra's "Version Tracker" tool to ...
Rolf Rolles's user avatar
  • 9,198
1 vote

Why are machine code decompilers less capable than for example those for the CLR and JVM?

Java and .NET both include a feature called "reflection", which makes it possible to access inner workings of a class and instances thereof, using runtime-generated strings that hold the ...
supercat's user avatar
  • 171

Only top scored, non community-wiki answers of a minimum length are eligible