user avatar
user avatar
user avatar
MrSynAckSter
  • Member for 9 years, 1 month
  • Last seen more than a week ago
13 votes
2 answers
4k views

How do the internals of a Windows update security patch work?

9 votes
2 answers
12k views

How do you can you disassemble and dump an entire binary?

8 votes
1 answer
2k views

Retrieving Objective-C Control Flow?

6 votes
2 answers
595 views

Is there a way to recover macros from compiled code?

5 votes
1 answer
1k views

Are Reverse Debuggers Impossible on OSX?

5 votes
1 answer
3k views

Disassembling VxWorks Firmware

4 votes
2 answers
2k views

Is there a method for "guessing" the addresses for unknown areas in bare metal firmware binaries?

3 votes
1 answer
136 views

What is the encoding format for unconditional Jumps on SPARC/SPARC64?

3 votes
0 answers
565 views

Is there an existing tool to reverse engineer Xamarin AOTDATA files?

3 votes
2 answers
459 views

Where are page permissions stored in an ELF binary?

2 votes
1 answer
168 views

Is data exfiltration possible without obvious system calls? [closed]

2 votes
0 answers
191 views

How to return a list of vtable methods?

2 votes
1 answer
487 views

Why does IDA Pro fail to add these constants?

1 vote
0 answers
79 views

Windows: Is it possible to mix FastIoDispatch with the registration of IOCTLs?

1 vote
1 answer
114 views

IDAPython: Is it possible to determine whether an instruction operand is a constant rather than a variable?

1 vote
1 answer
46 views

Does COT_HELPER have arguments/operands?

1 vote
1 answer
671 views

Where can you find the name of a driver causing a kernel mode crash?

1 vote
1 answer
105 views

How to accurately virtualize bespoke hardware?

1 vote
0 answers
229 views

Is there an existing method to lift ARMv7 [iPhone] binaries to LLVM IR?

0 votes
1 answer
214 views

Is it possible to programmatically determine if a crash resulted from a buffer overflow?

0 votes
0 answers
593 views

OPENOCD Error codes: How do I fix this?

0 votes
1 answer
1k views

How would I search an IDA pro database for instances of I.P addresses?

0 votes
1 answer
1k views

Can either volatility or GDB dump only the heap memory of a process under Linux?

0 votes
3 answers
428 views

Is it possible to programmatically search a disassembly for functions missing bounds checks?