A tag is a keyword or label that categorizes your question with other, similar questions. Using the right tags makes it easier for others to find and answer your question.
x64 (also referred to as x86-64 and amd64) is a 64-bit extension of IA-32, the 32-bit generation of the x86 instruction set.
A chain of characters, usually used to store text messages lying statically in the program or to receive dynamically messages from the user.
A `shellcode` or `eggshell` is a small program represented as a string of instructions in their hexadecimal encoding.
A system of rules designed to allow the communication between two or more participants. The two main types of protocols are either stateless protocols (UDP) or stateful protocols (TCP).
An OllyDbg 1.1 derivative made by Immunity Inc., that internally supports python scripting and shipped with many scripts to ease vulnerability and exploitation research.
Refer to the hexadecimal format which is directly executed by the CPU or the interpreter. Opposed to the human-readable format which can be understood by the reverse without any intermediate translati…
Refer to any programs specifically designed to be a plugin of IDA Pro.
QEMU is a software that performs CPU emulation through dynamic binary translation. It allows the execution of applications compiled for a certain specific architecture to run on other architectures.
Software development kit of the IDAPro software suite, allow to develop processor modules, loaders and various extensions.
An Unix-based operating system originally forked from NextSTEP and developed by Apple Inc. MacOS X runs a Darwin kernel together with Apple Inc. utilities.
Mostly used for explaining core components of an operating system.
A computer program that transforms source code into the target language, often having a binary form known as object code.
Kernel-mode executables used to communicate between the OS and peripherals.
when asking *about* registers, their properties, existence, usage or limitations. Avoid using this tag just because registers are mentioned in the question.
USB (Universal Serial Bus) is an industry standard defining the connectors, cables, and protocols used for communication and power supply between multiple devices.
Refer to a section of executable, library or object files that link memory addresses in the program and a string (the symbol). Symbols are used to store debug information, function names (for dynamic …
Process of copying the content of a block of a program's memory to file. It can be not trivial if the target program hooked memory-related APIs.
Assembler-like language destined to be executed in an interpreter, in a virtual machine or by just in time compilation. Java, Python and many other high-level languages are using bytecode languages.
Any kind of communication between computers using a protocol and the infra-structure that allow this communication.
the practice and study of techniques for secure communication and sending of data, and the construction and analysis of protocols that accomplish this.
A specific C language data-type construct which allow to declare a list of primitive types variables bound together in a single logical memory unit.
A chain of software made to build self-extractable archived software (with a focus on compression and/or on obfuscation). Packer prevent most of the static analysis techniques and force the reverser t…
A well known disassembler from the GNU `binutils` package. Only based on the linear sweep techniques and a few more heuristics when symbols can help.
GNU Compiler Collection, it includes front ends for C, C++, Objective-C, Fortran, Java, Ada, and Go, as well as libraries for these languages (libstdc++, libgcj,...).
Instrumentation is the process of injecting probe functions into a code (executable, source code, ...) for measurement purposes. It is extensively used for *profiling* or *dynamic-analysis* by tools l…
Dynamic linking is the process of resolving at runtime a program's external function calls or dependencies. It happens at program startup or even while the program is running, as opposed to static li…
when referring to a true .EXE file as opposed to a .COM or .MSI or any other executable.
Digital forensics (sometimes known as digital forensic science) is a branch of forensic science encompassing the recovery and investigation of material found in digital devices, often in relation to c…
Hopper is an interactive disassembler similar to IDA, available for macOS, Windows and Linux