reverse engineering

learning

resources

tools

  • al-khaser - public malware techniques used in the wild: virtual machine, emulation, debuggers, sandbox detection.
  • angrop - angrop is a rop gadget finder and chain builder
  • cuckoo - cuckoo sandbox is an automated dynamic malware analysis system
  • cutter - free and open source reverse engineering platform powered by rizin
  • elfkickers - a collection of programs that access and manipulate elf files.
  • fq - jq for binary formats
  • frida - dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers.
  • ghidra - a software reverse engineering (sre) suite of tools developed by nsa's research directorate in support of the cybersecurity mission
  • imhex - a hex editor for reverse engineers, programmers and people who value their retinas when working at 3 am.
  • objdump - displays the hex and assembly for a binary file
  • panda - platform for architecture-neutral dynamic analysis
  • revsync - realtime cross-tool collaborative reverse engineering
  • rr - record and replay framework
  • usbrevue - usbrevue is a suite of tools for reverse-engineering usb devices.
  • yara - yara is a tool aimed at (but not limited to) helping malware researchers to identify and classify malware samples
  • xepor - xepor, a web routing framework for reverse engineers and security researchers, brings the best of mitmproxy & flask