A tag is a keyword or label that categorizes your question with other, similar questions. Using the right tags makes it easier for others to find and answer your question.
Analysis of a piece of code by letting it run (fully or step-by-step) on a real system or in a virtualized environment, as opposed to [tag:static-analysis]
Refer to any programs specifically designed to be a plugin of IDA Pro.
A file that can be processed (executed) by the CPU of the machine through the operating system accordingly to the instructions that it contains.
Using techniques to change the behavior of an application or application component in order to use it to ones advantage. When used it is often referred to software exploitation where an attacker can t…
a software tool which transforms machine code into a human readable mnemonic representation called assembly language.
Refer to devices with scarcity of resources (energy, memory, cpu power, ...). It gather any consumer electronics (radio receivers, television sets, MP3 players, video recorders, DVD players, digital c…
Files with machine code directly readable by the CPU or the interpreter. It encloses any executables, libraries, object code or memory dump of the analyzed software.
A C/C++ decompiler that has been developed by the same company than IDAPro in response to users needs. It works in close relationship with the IDAPro user interface.
visualized the memory content or the variables while memory inspection. Hexadecimal (or 'hex') represents integers in base 16 (with digits taken within `0`-`9` and `a`-`f`).
x64 (also referred to as x86-64 and amd64) is a 64-bit extension of IA-32, the 32-bit generation of the x86 instruction set.
A sequence of instructions performing a basic task packaged as a unit in a program.
the process of adding or deleting code from an executable file in order to modify its functioning.
Process of decoding a compressed file to get back to the original one. Some compression software may also include encryption or obfuscation in order to protect their format/algorithm.
An open-source x64/x32 debugger for windows with UI inspired by OllyDbg.
RISC instruction set architecture (ISA). It is commonly used in embedded devices such as set top boxes and networking gear. Many university-level computer architecture classes use the MIPS ISA due to…
Understand software updates only-based on binary patches by reversing it and analyzing the differences between old and new version of the software.
a software framework designed mainly for the Microsoft Windows operating system. It includes an implementation of the Base Class Library, Common Language Runtime (commonly referr…
Unix memory model relies on a strong separation between user-space memory and kernel-space memory. This tag refers to mechanisms that lie in kernel-space.
intercept function calls and to attach a piece of code before or/and after the execution of the function itself.
Process of sending data one bit at a time, sequentially, over a communication channel or computer bus. Most of the computer systems, and especially embedded systems, have such communication port.
An OllyDbg 1.1 derivative made by Immunity Inc., that internally supports python scripting and shipped with many scripts to ease vulnerability and exploitation research.
An Unix-based operating system originally forked from NextSTEP and developed by Apple Inc. MacOS X runs a Darwin kernel together with Apple Inc. utilities.
A mapping of a given code to values or semantics. Guessing the meaning of an encoding requires a lot of trials but some encoding are standard and can be guessed quite easily.
the package file format used by the Android operating system for distribution and installation of mobile applications.
A classical programming bug that may lead to a possible security flaw in software. Exploitation of this bug is usually taking place either in the stack or in the heap.
Microsoft's application programming interfaces available in the Windows operating system.
an interpreted computer programming language. It was originally implemented as part of web browsers.
Part of a process memory that stores all the automatic variables and the call-stack of the functions currently called by the process.
Little Puzzle Applications for Reverse Code Engineers, with the goal to break a protection scheme legally for exercise. These often have a lot of built-in security to prevent attackers from succeeding…
Process of translating an unstructured assembler program into a structured high-level language program (e.g. translation from x86 to C).
A system of rules designed to allow the communication between two or more participants. The two main types of protocols are either stateless protocols (UDP) or stateful protocols (TCP).
an error-detecting code commonly used in digital networks and storage devices to detect accidental changes to raw data.