User MrSynAckSter

13 votes

2 answers

5k views

How do the internals of a Windows update security patch work?

asked Sep 12, 2014 at 14:33

9 votes

2 answers

13k views

How do you can you disassemble and dump an entire binary?

asked Mar 26, 2015 at 23:05

8 votes

1 answer

2k views

Retrieving Objective-C Control Flow?

asked Oct 9, 2015 at 18:56

7 votes

2 answers

638 views

Is there a way to recover macros from compiled code?

asked May 31, 2013 at 21:10

6 votes

1 answer

1k views

Are Reverse Debuggers Impossible on OSX?

asked Oct 23, 2015 at 15:29

5 votes

1 answer

4k views

Disassembling VxWorks Firmware

asked Oct 31, 2017 at 14:52

4 votes

2 answers

3k views

Is there a method for "guessing" the addresses for unknown areas in bare metal firmware binaries?

asked Oct 24, 2017 at 5:08

3 votes

1 answer

821 views

Why does IDA Pro fail to add these constants?

asked Jul 3, 2020 at 17:40

3 votes

1 answer

142 views

What is the encoding format for unconditional Jumps on SPARC/SPARC64?

asked May 30, 2017 at 18:28

3 votes

0 answers

642 views

Is there an existing tool to reverse engineer Xamarin AOTDATA files?

asked Jul 20, 2017 at 20:19

3 votes

2 answers

580 views

Where are page permissions stored in an ELF binary?

asked Mar 25, 2015 at 18:27

2 votes

1 answer

174 views

Is data exfiltration possible without obvious system calls? [closed]

asked Jun 24, 2014 at 14:33

2 votes

0 answers

281 views

How to return a list of vtable methods?

asked May 27, 2019 at 18:02

1 vote

1 answer

1k views

Where can you find the name of a driver causing a kernel mode crash?

asked Nov 25, 2019 at 7:16

1 vote

0 answers

111 views

Windows: Is it possible to mix FastIoDispatch with the registration of IOCTLs?

asked Nov 20, 2020 at 6:24

1 vote

2 answers

422 views

IDAPython: Is it possible to determine whether an instruction operand is a constant rather than a variable?

asked Oct 7, 2021 at 6:55

1 vote

1 answer

93 views

Does COT_HELPER have arguments/operands?

asked Oct 9, 2021 at 8:10

1 vote

1 answer

78 views

How to make IDA stop showing a struct as an array

asked Aug 7 at 20:30

1 vote

1 answer

106 views

How to accurately virtualize bespoke hardware?

asked Feb 19, 2015 at 4:25

1 vote

0 answers

259 views

Is there an existing method to lift ARMv7 [iPhone] binaries to LLVM IR?

asked May 4, 2017 at 19:36

0 votes

1 answer

230 views

Is it possible to programmatically determine if a crash resulted from a buffer overflow?

asked Feb 3, 2016 at 22:58

0 votes

0 answers

801 views

OPENOCD Error codes: How do I fix this?

asked Mar 11, 2019 at 3:01

0 votes

1 answer

1k views

How would I search an IDA pro database for instances of I.P addresses?

asked Mar 2, 2015 at 0:49

0 votes

1 answer

1k views

Can either volatility or GDB dump only the heap memory of a process under Linux?

asked Apr 1, 2015 at 19:42

0 votes

3 answers

506 views

Is it possible to programmatically search a disassembly for functions missing bounds checks?

asked Feb 12, 2015 at 16:01

Stack Exchange Network

25 Questions

How do the internals of a Windows update security patch work?

How do you can you disassemble and dump an entire binary?

Retrieving Objective-C Control Flow?

Is there a way to recover macros from compiled code?

Are Reverse Debuggers Impossible on OSX?

Disassembling VxWorks Firmware

Is there a method for "guessing" the addresses for unknown areas in bare metal firmware binaries?

Why does IDA Pro fail to add these constants?

What is the encoding format for unconditional Jumps on SPARC/SPARC64?

Is there an existing tool to reverse engineer Xamarin AOTDATA files?

Where are page permissions stored in an ELF binary?

Is data exfiltration possible without obvious system calls? [closed]

How to return a list of vtable methods?

Where can you find the name of a driver causing a kernel mode crash?

Windows: Is it possible to mix FastIoDispatch with the registration of IOCTLs?

IDAPython: Is it possible to determine whether an instruction operand is a constant rather than a variable?

Does COT_HELPER have arguments/operands?

How to make IDA stop showing a struct as an array

How to accurately virtualize bespoke hardware?

Is there an existing method to lift ARMv7 [iPhone] binaries to LLVM IR?

Is it possible to programmatically determine if a crash resulted from a buffer overflow?

OPENOCD Error codes: How do I fix this?

How would I search an IDA pro database for instances of I.P addresses?

Can either volatility or GDB dump only the heap memory of a process under Linux?

Is it possible to programmatically search a disassembly for functions missing bounds checks?