A tag is a keyword or label that categorizes your question with other, similar questions. Using the right tags makes it easier for others to find and answer your question.
An open-source x64/x32 debugger for windows with UI inspired by OllyDbg.
Techniques to remove obfuscation from a piece of program.
prevent, mitigate or detect an attempt to run the software within a debugging environment.
Analysis of a piece of code by letting it run (fully or step-by-step) on a real system or in a virtualized environment, as opposed to static analysis.
Files with machine code directly readable by the CPU or the interpreter. It encloses any executables, libraries, object code or memory dump of the analyzed software.
Using techniques to change the behavior of an application or application component in order to use it to ones advantage. When used it is often referred to software exploitation where an attacker can t…
a software tool which transforms machine code into a human readable mnemonic representation called assembly language.
A file that can be processed (executed) by the CPU of the machine through the operating system accordingly to the instructions that it contains.
A decompiler plugin for IDA, producing (pseudo-)C/C++ code, developed by the company of the same name (Hex-Rays).
the process of adding or deleting code from an executable file in order to modify its functioning.
Refer to devices with scarcity of resources (energy, memory, cpu power, ...). It gather any consumer electronics (radio receivers, television sets, MP3 players, video recorders, DVD players, digital c…
Refer to any programs specifically designed to be a plugin of IDA Pro.
A sequence of instructions performing a basic task packaged as a unit in a program.
Understand software updates only-based on binary patches by reversing it and analyzing the differences between old and new version of the software.
The operating system by apple for mobile devices
a software framework designed mainly for the Microsoft Windows operating system. It includes an implementation of the Base Class Library, Common Language Runtime (commonly referr…
intercept function calls and to attach a piece of code before or/and after the execution of the function itself.
Process of decoding a compressed file to get back to the original one. Some compression software may also include encryption or obfuscation in order to protect their format/algorithm.
A classical programming bug that may lead to a possible security flaw in software. Exploitation of this bug is usually taking place either in the stack or in the heap.
visualized the memory content or the variables while memory inspection. Hexadecimal (or 'hex') represents integers in base 16 (with digits taken within `0`-`9` and `a`-`f`).
the package file format used by the Android operating system for distribution and installation of mobile applications.
Process of sending data one bit at a time, sequentially, over a communication channel or computer bus. Most of the computer systems, and especially embedded systems, have such communication port.
an interpreted computer programming language. It was originally implemented as part of web browsers.
RISC instruction set architecture (ISA). It is commonly used in embedded devices such as set top boxes and networking gear. Many university-level computer architecture classes use the MIPS ISA due to…
Part of a process memory that stores all the automatic variables and the call-stack of the functions currently called by the process.
A mapping of a given code to values or semantics. Guessing the meaning of an encoding requires a lot of trials but some encoding are standard and can be guessed quite easily.
Process of translating an unstructured assembler program into a structured high-level language program (e.g. translation from x86 to C).
Unix memory model relies on a strong separation between user-space memory and kernel-space memory. This tag refers to mechanisms that lie in kernel-space.
x64 (also referred to as x86-64 and amd64) is a 64-bit extension of IA-32, the 32-bit generation of the x86 instruction set.
Little Puzzle Applications for Reverse Code Engineers, with the goal to break a protection scheme legally for exercise. These often have a lot of built-in security to prevent attackers from succeeding…
A multi-paradigm programming language encompassing strong typing, imperative, declarative, functional, generic, object-oriented (class-based), and component-oriented programming disciplines
an error-detecting code commonly used in digital networks and storage devices to detect accidental changes to raw data.
a small program represented as a string of instructions in their hexadecimal encoding.
revert the process of compilation. Decompiler takes a binary program file as input and output the same program expressed in a structured higher-level language.