Stack Exchange
log in sign up chat discuss faq users badges

Area 51 » Technology

definition commitment beta
251
followers
Share This

Reverse Engineering

Beta Q&A site for researchers and developers who explore the principles of a system through analysis of its structure, function, and operation.

12
votes
3
answers

Let's come up with a more detailed description

mar 15 '13 at 20:31 Robert Cartaino 473
8
votes
5
answers

What would a Reverse Engineering site offer that existing sites don't?

mar 14 '13 at 22:20 Community♦ 1

discuss this proposal

This proposal is now in the Beta phase — example questions are locked!

51 Example Questions

active newest votes
up vote 22 down vote
What are the major challenges in the static analysis of binary executables?
added by 94c3 Jan 28 '13 at 15:42
link
5  
<comments removed> Please do not use comments to answer these questions. Comments are here to help improve the questions. This proposal is not part of the Q&A site, and the task at hand is to help define a future site. Thank you. – Robert Cartaino Jan 28 '13 at 16:26
1  
Doesn't this seem too open-ended and subjective, and therefore "not a good fit for our Q&A format"? – KenB Feb 19 '13 at 19:04
up vote 16 down vote
How to decompile an object file (.o) into C source code?
added by delete Jan 13 '13 at 21:42
link
4  
Might be better to be more explicit here, i.e. how to translate an object file back to source. In my mind this question is about decompilation and the limits thereof. – 94c3 Jan 28 '13 at 16:45
1  
The title of this question is not a question as it should be. Maybe "How do I convert an .o file back to C source code?" – Vegard Feb 5 '13 at 15:00
up vote 15 down vote
Are there public test suites available for testing a disassembler?
added by 94c3 Jan 28 '13 at 15:54
link
This question generated some interest on the reverse engineering subreddit: reddit.com/r/ReverseEngineering/comments/16hz9z/…. – 94c3 Jan 28 '13 at 16:02
up vote 13 down vote
What are the techniques disassemblers use to process a binary?
added by 94c3 Jan 28 '13 at 16:07
link
<comments removed> Please do not use comments to answer these questions. Comments are here to help improve the questions. This proposal is not part of the Q&A site, and the task at hand is to help define a future site. Thank you. – Robert Cartaino Jan 28 '13 at 16:24
up vote 13 down vote
What scriptable debuggers exist that are cross-platform, if any? Preference given to python-based implementations.
added by Jordan Jan 29 '13 at 6:19
link
up vote 12 down vote
I'm beginning my study of reverse engineering topics and would like book recommendations -- what should I read first to better my skills?
added by Jordan Jan 29 '13 at 6:21
link
4  
This seems like a bad question for a couple reasons. It is not possible to give an exact answer. It will simply be a wiki page. Additionally, as time passes, all answers will become outdated as new techniques emerge. – samoz Feb 1 '13 at 17:30
3  
I agree with samoz that these questions don't have an exact answer and tend to get out of date. With that said though, I have found a lot of the "book" questions on SO to be really helpful resources even though they are eventually closed and locked. – Simucal Feb 4 '13 at 14:05
up vote 11 down vote
I can't figure out this snippet of highly optimized, compiler-generated assembly code; what does it do? What optimization is it?
added by Syzygy Feb 2 '13 at 2:31
link
1  
I am a little bit concerned about the prospect of users (perhaps especially new users) dumping a large block of ASM and saying "reverse this for me plz kthxbye". – KenB Feb 19 '13 at 19:06
Maybe, what could I use to tell me? Otherwise, @KenB is right and we could be in trouble. – delete Feb 20 '13 at 9:31
There should be requirements for those dumps. Like origin, size and what is this person looking for. – 2df Feb 20 '13 at 23:45
up vote 11 down vote
What methods exist to extract firmware from an embedded device to enable reverse engineering?
added by nopnopgoose Feb 2 '13 at 20:27
link
up vote 11 down vote
What is the best way to inject functionality into an existing executable?
added by bushing Feb 4 '13 at 3:59
link
up vote 11 down vote
What is the best way of reverse-engineering this device driver?
added by bushing Feb 4 '13 at 4:03
link
up vote 11 down vote
How can I locate all of the crypto keys embedded within this executable?
added by bushing Feb 4 '13 at 4:13
link
up vote 10 down vote
What is the relationship between data flow and control flow?
added by 94c3 Jan 28 '13 at 15:51
link
<comments removed> Please do not use comments to answer these questions. Comments are here to help improve the questions. This proposal is not part of the Q&A site, and the task at hand is to help define a future site. Thank you. – Robert Cartaino Jan 28 '13 at 16:25
up vote 10 down vote
How are virtualization obfuscators different than other types of obfuscation?
added by 94c3 Jan 28 '13 at 15:58
link
<comments removed> Please do not use comments to answer these questions. Comments are here to help improve the questions. This proposal is not part of the Q&A site, and the task at hand is to help define a future site. Thank you. – Robert Cartaino Jan 28 '13 at 16:25
up vote 10 down vote
What are the best practice methods for documenting research into reverse engineering of software packages and their file formats?
added by Ross Spencer Jan 28 '13 at 16:22
link
up vote 10 down vote
How can I go about unpacking a UPX binary?
added by samoz Jan 28 '13 at 19:08
link
up vote 10 down vote
What disassembly libraries exist that handle multiple architectures using a uniform C or C++ API?
added by jix Feb 1 '13 at 21:04
link
up vote 10 down vote
Have you ever seen this form of obfuscation before? Any ideas on how I go about breaking it?
added by Syzygy Feb 3 '13 at 21:47
link
up vote 10 down vote
What is the state of the art in automation of vulnerability analysis? What can realistically be achieved with today's publicly-available technology?
added by Syzygy Feb 3 '13 at 22:08
link
up vote 10 down vote
What is the likely processor architecture of this snippet of binary data?
added by bushing Feb 4 '13 at 3:54
link
up vote 10 down vote
How can I reverse-engineer the statistical data file from my insulin pump controller?
added by bushing Feb 4 '13 at 4:07
link
Assuming a sample of the file were provided – ipmcc Feb 9 '13 at 0:14
up vote 10 down vote
How can I identify cryptographic functions in binaries?
added by Laszlo Feb 4 '13 at 4:50
link
up vote 10 down vote
How can I discover the functionality of an integrated circuit whose data sheet is not available?
added by nopnopgoose Feb 4 '13 at 5:56
link
up vote 10 down vote
What are common assembly patterns/tricks (e.g. hide moves and compares) from obfuscators to look out for?
added by samuirai Feb 4 '13 at 12:10
link
up vote 10 down vote
How do I extract the ROM contents of my embedded device?
added by Skyr Feb 4 '13 at 12:44
link
up vote 10 down vote
Are there any free videos/tutorials/resources that teach a beginner to get their feet wet on reverse engineering?
added by rev Feb 4 '13 at 13:40
link
up vote 10 down vote
My company has funded me to take a rev. engg. course. Which course would help me the most? I have extensive background in programming.
added by rev Feb 4 '13 at 13:43
link
up vote 10 down vote
Are there any good references for discovering and reverse engineering COM objects from PE files?
added by Modoc Feb 4 '13 at 13:45
link
up vote 10 down vote
What sandbox environments do you use to probe a binary and protect your local environment?
added by Modoc Feb 4 '13 at 13:49
link
up vote 10 down vote
What tools are available for visualizing the control flow graph of a binary?
added by Modoc Feb 4 '13 at 13:53
link
Isn't this a list question ? – AsheeshR Feb 15 '13 at 16:42
up vote 10 down vote
Does anybody recognize what this bit of assembly is supposed to accomplish?
added by Modoc Feb 4 '13 at 14:00
link
up vote 10 down vote
Are there any tools that can help with reverse engineering javascript deobfuscation of shellcode?
added by rev Feb 4 '13 at 14:31
link
up vote 10 down vote
What tools are available for reversing malicious pdf documents?
added by rev Feb 4 '13 at 15:05
link
up vote 10 down vote
we had a malware infection and I got hold of the executable. what is the safest way to reverse engineer the specimen?
added by rev Feb 5 '13 at 0:17
link
up vote 10 down vote
What can I do in my C program, that will be compiled using GnuC version x, to avoid reverse-engineering?
added by woliveirajr Feb 5 '13 at 14:28
link
up vote 10 down vote
Where should one begin when attempting to reverse engineer an unknown format or protocol?
added by Archenoth Feb 5 '13 at 22:12
link
up vote 10 down vote
I often see useless instructions like`lea esp, [esp]` in disassembly even though there is no obfuscation otherwise, am I missing something they do?
added by jix Feb 10 '13 at 13:49
link
up vote 10 down vote
Which compiler produces assembly code like this?
added by jix Feb 10 '13 at 13:57
link
up vote 10 down vote
What kind of bus protocol is used in this logic analyzer capture?
added by jix Feb 10 '13 at 14:04
link
up vote 10 down vote
How to identify compiler artifacts in a binary?
added by 2df Feb 12 '13 at 11:19
link
up vote 10 down vote
How can I identify debug detection code?
added by jyzuz Feb 15 '13 at 17:40
link
1 2 next

This site is in

Public Beta

Anyone can participate!

Sites remain in beta for at least 90 days to build up a critical mass of users, questions, and participation.

proposed by

X01xtTv
2,781●1●1●4

8 years ago

edited by

Adam Lear♦ ♦ 22
308k●120●994●1582

7 years ago

viewed

29,560 times

latest activity

7 years ago

followers

users also following

4.8% Freelancing
4.4% Ebooks
4.4% Open Data
3.6% Puzzling
50.2% only this proposal

followers active in

59.0% Stack Overflow
22.3% Super User
17.9% Reverse Engineering
14.3% Meta Stack Exchange
14.3% Server Fault
13.5% Information Security

recent followers

added Apr 1 '13 at 16:50
lfxgroove
3,860●1●23●41
added Apr 1 '13 at 16:40
Novice User
6,364●16●62●103
added Apr 1 '13 at 13:47
MatToufoutu
17.2k●8●64●92
added Apr 1 '13 at 10:48
Sukminder
29.9k●5●85●158
added Apr 1 '13 at 3:53
klobucar
6,870●2●15●29
added Mar 31 '13 at 14:16
Jet
4,181●1●36●77
added Mar 31 '13 at 7:02
JW 웃
237k●61●457●487
added Mar 29 '13 at 6:44
iOsBoy
8,491●15●71●132
added Mar 28 '13 at 17:39
Lehrling
51●1
added Mar 28 '13 at 13:33
Jason Geffner
51●2
added Mar 28 '13 at 9:17
user83002
51●1
added Mar 28 '13 at 4:59
Eugene S
15.6k●27●136●291
added Mar 28 '13 at 3:21
bps
51●1
added Mar 27 '13 at 17:27
Brian
9,387●1●30●79
added Mar 27 '13 at 17:25
ssteinberg
6,379●3●34●66
added Mar 27 '13 at 12:20
Thomas Siebert
51●1
added Mar 27 '13 at 10:11
Ian
18.7k●46●155●214
added Mar 27 '13 at 9:16
user81876
51●1
added Mar 27 '13 at 5:53
MiJyn
7,685●4●54●104
added Mar 27 '13 at 2:55
bluehavana
1,850●1●12●20
added Mar 26 '13 at 20:56
Neal P
740●1●8●17
added Mar 26 '13 at 17:26
user81813
51●1
added Mar 26 '13 at 15:35
user81795
51●1
added Mar 26 '13 at 3:09
ius
51●1
added Mar 25 '13 at 20:08
Mridul bhatnagar
51●1
added Mar 25 '13 at 19:48
Dan L.
51●1
added Mar 24 '13 at 22:00
AndrejaKo
54.6k●56●285●576
added Mar 24 '13 at 20:31
Patrick B.
20k●16●121●249
added Mar 24 '13 at 10:43
heinrich5991
6,517●4●53●98
added Mar 23 '13 at 14:23
user81539
51●1
added Mar 23 '13 at 4:22
Till
28.1k●13●87●135
added Mar 22 '13 at 12:33
Andrew
51●1
added Mar 21 '13 at 4:39
yibe
5,261●6●35●39
added Mar 20 '13 at 19:47
Blake Johnson
330●1●3●16
added Mar 20 '13 at 18:21
JanUlrich
51●1
added Mar 20 '13 at 17:37
Vince
24.6k●11●123●255
added Mar 20 '13 at 16:16
user81282
51●1
added Mar 20 '13 at 14:36
TRiG is Timothy Richard Green
51.8k●18●323●886
added Mar 20 '13 at 13:04
Kevin Ford
3,397●6●23●76
added Mar 20 '13 at 12:48
withzombies
51●1
feed icon proposal feed
faq | blog | legal | privacy policy | contact us | feedback always welcome
site design / logo © 2021 Stack Exchange Inc; user contributions licensed under cc by-sa; see the licensing help page for more information.
rev 2021.2.22.577