A tag is a keyword or label that categorizes your question with other, similar questions. Using the right tags makes it easier for others to find and answer your question.
Analysis of a piece of code by letting it run (fully or step-by-step) on a real system or in a virtualized environment, as opposed to [tag:static-analysis]
Using techniques to change the behavior of an application or application component in order to use it to ones advantage. When used it is often referred to software exploitation where an attacker can t…
A file that can be processed (executed) by the CPU of the machine through the operating system accordingly to the instructions that it contains.
An open-source x64/x32 debugger for windows with UI inspired by OllyDbg.
Files with machine code directly readable by the CPU or the interpreter. It encloses any executables, libraries, object code or memory dump of the analyzed software.
a software tool which transforms machine code into a human readable mnemonic representation called assembly language.
Refer to any programs specifically designed to be a plugin of IDA Pro.
A decompiler plugin for IDA, producing (pseudo-)C/C++ code, developed by the company of the same name (Hex-Rays).
Refer to devices with scarcity of resources (energy, memory, cpu power, ...). It gather any consumer electronics (radio receivers, television sets, MP3 players, video recorders, DVD players, digital c…
the process of adding or deleting code from an executable file in order to modify its functioning.
Process of decoding a compressed file to get back to the original one. Some compression software may also include encryption or obfuscation in order to protect their format/algorithm.
visualized the memory content or the variables while memory inspection. Hexadecimal (or 'hex') represents integers in base 16 (with digits taken within `0`-`9` and `a`-`f`).
a software framework designed mainly for the Microsoft Windows operating system. It includes an implementation of the Base Class Library, Common Language Runtime (commonly referr…
A sequence of instructions performing a basic task packaged as a unit in a program.
x64 (also referred to as x86-64 and amd64) is a 64-bit extension of IA-32, the 32-bit generation of the x86 instruction set.
Understand software updates only-based on binary patches by reversing it and analyzing the differences between old and new version of the software.
A classical programming bug that may lead to a possible security flaw in software. Exploitation of this bug is usually taking place either in the stack or in the heap.
Process of sending data one bit at a time, sequentially, over a communication channel or computer bus. Most of the computer systems, and especially embedded systems, have such communication port.
RISC instruction set architecture (ISA). It is commonly used in embedded devices such as set top boxes and networking gear. Many university-level computer architecture classes use the MIPS ISA due to…
Unix memory model relies on a strong separation between user-space memory and kernel-space memory. This tag refers to mechanisms that lie in kernel-space.
intercept function calls and to attach a piece of code before or/and after the execution of the function itself.
the package file format used by the Android operating system for distribution and installation of mobile applications.
Part of a process memory that stores all the automatic variables and the call-stack of the functions currently called by the process.
an interpreted computer programming language. It was originally implemented as part of web browsers.
A mapping of a given code to values or semantics. Guessing the meaning of an encoding requires a lot of trials but some encoding are standard and can be guessed quite easily.
Little Puzzle Applications for Reverse Code Engineers, with the goal to break a protection scheme legally for exercise. These often have a lot of built-in security to prevent attackers from succeeding…
Microsoft's application programming interfaces available in the Windows operating system.
An OllyDbg 1.1 derivative made by Immunity Inc., that internally supports python scripting and shipped with many scripts to ease vulnerability and exploitation research.
An Unix-based operating system originally forked from NextSTEP and developed by Apple Inc. MacOS X runs a Darwin kernel together with Apple Inc. utilities.
when asking questions related specifically to the NSA's Ghidra reverse engineering tool.
Process of translating an unstructured assembler program into a structured high-level language program (e.g. translation from x86 to C).
A system of rules designed to allow the communication between two or more participants. The two main types of protocols are either stateless protocols (UDP) or stateful protocols (TCP).