baordog
  • Member for 8 years, 8 months
  • Last seen more than a month ago
2 answers
13 votes
4k views
2 bookmarks
How do the internals of a Windows update security patch work?
2 answers
9 votes
11k views
4 bookmarks
How do you can you disassemble and dump an entire binary?
1 answers
8 votes
1k views
Retrieving Objective-C Control Flow?
2 answers
6 votes
586 views
Is there a way to recover macros from compiled code?
1 answers
5 votes
3k views
3 bookmarks
Disassembling VxWorks Firmware
1 answers
5 votes
1k views
Are Reverse Debuggers Impossible on OSX?
2 answers
4 votes
2k views
1 bookmarks
Is there a method for "guessing" the addresses for unknown areas in bare metal firmware binaries?
0 answers
3 votes
530 views
4 bookmarks
Is there an existing tool to reverse engineer Xamarin AOTDATA files?
1 answers
3 votes
133 views
1 bookmarks
What is the encoding format for unconditional Jumps on SPARC/SPARC64?
2 answers
3 votes
432 views
1 bookmarks
Where are page permissions stored in an ELF binary?
1 answers
2 votes
387 views
Why does IDA Pro fail to add these constants?
0 answers
2 votes
158 views
How to return a list of vtable methods?
1 answers
2 votes
165 views
Is data exfiltration possible without obvious system calls?
1 answers
1 votes
86 views
IDAPython: Is it possible to determine whether an instruction operand is a constant rather than a variable?
0 answers
1 votes
22 views
Does COT_HELPER have arguments/operands?
0 answers
1 votes
73 views
Windows: Is it possible to mix FastIoDispatch with the registration of IOCTLs?
1 answers
1 votes
580 views
Where can you find the name of a driver causing a kernel mode crash?
0 answers
1 votes
225 views
3 bookmarks
Is there an existing method to lift ARMv7 [iPhone] binaries to LLVM IR?
1 answers
1 votes
103 views
How to accurately virtualize bespoke hardware?
0 answers
0 votes
530 views
OPENOCD Error codes: How do I fix this?
1 answers
0 votes
213 views
Is it possible to programmatically determine if a crash resulted from a buffer overflow?
1 answers
0 votes
1k views
How would I search an IDA pro database for instances of I.P addresses?
1 answers
0 votes
1k views
Can either volatility or GDB dump only the heap memory of a process under Linux?
3 answers
0 votes
402 views
Is it possible to programmatically search a disassembly for functions missing bounds checks?