langlauf.io
  • Member for 6 years, 11 months
  • Last seen this week
1 answers
8 votes
12k views
4 bookmarks
Which python library for parsing Linux ELF files?
5 answers
7 votes
2k views
2 bookmarks
How to find out if PE executable was compiled with gcc or VisualStudio?
3 answers
6 votes
4k views
How to get the CPU architecture via Idapython?
1 answers
6 votes
4k views
1 bookmarks
Unicorn and QEMU: Example use cases to understand the differences
2 answers
6 votes
3k views
2 bookmarks
Intel PIN: How to access the INS object from inside an analysis function?
1 answers
6 votes
1k views
Call to an imported function in a PE file: Why is destination prepended with ds (call ds:func_name)?
1 answers
5 votes
4k views
2 bookmarks
How to log all memory accesses (read and write) including the memory content in a binary execution trace?
2 answers
5 votes
4k views
3 bookmarks
Ida Pro: parsig complex operand expression using Idapython
1 answers
4 votes
1k views
1 bookmarks
IDA Pro: Platform-independent way to check if an instruction is a jump
3 answers
4 votes
2k views
IDA: Generic approach to determine if an instruction reads from, or writes to, memory?
1 answers
4 votes
1k views
1 bookmarks
Intel PIN: InsertPredicatedCall and INS_InsertCall
1 answers
4 votes
805 views
2 bookmarks
Getting list of opcodes from PANDA trace
1 answers
4 votes
6k views
1 bookmarks
Setting name of (newly created) functions via IDAPython
1 answers
4 votes
4k views
ELF: How to make IDA show me the correct PLT (Procedure Linkage Table) content?
2 answers
3 votes
1k views
IDA basic block type fcb_cndret - what does it mean?
2 answers
3 votes
3k views
2 bookmarks
IDA Pro: Side effects or disadvantages of "Create function"
1 answers
3 votes
96 views
How would one find test cases for a self-implemented value set analysis (VSA)?
1 answers
3 votes
2k views
2 bookmarks
Limitations of capstone's disassembly capabilities compared to IDA
1 answers
3 votes
462 views
Function calls: xref.type always 'Code_Far_Call' or 'Code_Near_Call'?
1 answers
2 votes
461 views
1 bookmarks
ildasm on Linux: "original" ildasm.exe same as dotnet-ildasm?
1 answers
2 votes
259 views
2 bookmarks
Is all debug information of VS-compiled PE files contained in an external PDB file?
0 answers
2 votes
397 views
Is there a static data flow analysis tool for .net assemblies?
2 answers
2 votes
875 views
1 bookmarks
ARM assembly: Strange instruction pattern (endless loop?)
1 answers
2 votes
6k views
Idapython: How to get the opcode bytes corresponding to an instruction?
1 answers
2 votes
626 views
Strange function in IDA Pro: Only one basic block ending with a jmp sub_xxxxxx (instead of a ret)
1 answers
1 votes
2k views
1 bookmarks
Intel PIN: How to log the value of the fs and gs registers at every instruction?
1 answers
1 votes
68 views
Name other than ".text" for the main code section
0 answers
1 votes
91 views
Parse / statically analyzing .NET binaries using python
0 answers
1 votes
131 views
Binary Analysis Tool (BAT) no longer maintained - alternatives?
2 answers
1 votes
553 views
How to programatically extract function names, function arguments and strings from a .NET binary?