Questions tagged [reverse-engineering]

Reverse engineering is the process of discovering the technological principles of a human made device, object or system through analysis of its structure, function and operation.

Filter by
Sorted by
Tagged with
0 votes
0 answers
11 views

Inquiry about AZSPWM1 Implementation on TMS320F28335 for induction machine

I am currently working on implementing the AZSPWM1 (Active Zero State PWM) method on the C2000 from TI microcontroller for a spindle motor. I have been following the relevant documentation and ...
무함마드's user avatar
-2 votes
0 answers
34 views

I need help to decode the flag in the function __decode_flag . It is also given a hint .i cant find the solution for the XOR part

import base64 import binascii decodedFlag = 'That would have been too easy ^^' encodedFlag = b'...
zigzagu's user avatar
0 votes
0 answers
25 views

Running the dll file of the "Fanny worm" virus

I'm studying virus testing at university. I was given the task to investigate the "Fanny Worm" virus from the "Equation Group". For testing, I found a file dll_installer.dll ...
Salavat 3's user avatar
0 votes
0 answers
66 views

private key protection in c++ shared library

I am building a C++ shared Library which will be used to decrypt the encrypted file using a symmetric cryptographic Algorithm. My question is how should I store my private key in library. If I'll ...
Ghostop's user avatar
  • 43
0 votes
0 answers
5 views

Find vmaddr_slide of main app binary externally (Apple iOS)

is there any way to find vmaddr_slide of main app binary externally? i'm on jailbroken iOS and already obtained read/write to app. i've obtained header address of app via checking the first region in ...
qrandom's user avatar
0 votes
0 answers
24 views

What are the numbers near the registers mean in assembly? [duplicate]

Hopefully this question is suitable for this forum. I'm very new to assembly. So, I'm trying to change some of the code of the game in cheat engine. Lets say for example we have something like this in ...
SomeUser's user avatar
0 votes
0 answers
16 views

Is it possible to advertise an mDNS service with invalid name / type?

I'm trying to recreate some functionality of NearDrop, a MacOS app to interact with Android NearbyShare functionality. Namely, I want to create a program that's visible in NearbyShare. The repo has a ...
Quifisto's user avatar
0 votes
0 answers
22 views

Extracting protobuf files/protocols from an APK

I've been trying to reverse-engineer an Android API blah blah blah, and I'm trying to extract the protobuf files for it, however I can't find any references of it in the decompiled code or resources ...
llama-for3ver's user avatar
0 votes
0 answers
29 views

unable to find native module in /proc/.../maps for Android NDK app

I made a sample NDK hello world application via Android Studio (simply used the one straight from the wizard). Everything works fine and I'm able to communicate with the native module (hello_ndk.so). ...
efel's user avatar
  • 1,064
0 votes
0 answers
23 views

Eclipse + maven + hibernate-tools Reverse Engineering error

I'm trying to use the reverse engineering tool of the hibernate-tools suite to generate all the model of the tables in a PostgreSQL DB. I followed this guide https://www.codejava.net/frameworks/...
user2880516's user avatar
0 votes
0 answers
15 views

Access React component variable from Devtools in production build

Given third party site that I'd like to extend its functionality through Chrome Extension, How can I access React Component variable from outside the app, through DevTools code snippets maybe ? I'd ...
Lydon Ch's user avatar
  • 8,677
0 votes
1 answer
89 views

Learning RISC-V assembly and need help converting a C loop

I'm learning how to convert RISC-V assembly code to C, and I don't understand this conversion. A few questions I have: why is t1 being initialized to 6 instead of 0? We're using bne to compare t1 and ...
test1's user avatar
  • 3
-1 votes
0 answers
13 views

Decoding and Extracting Information from Binary TV Recording Files (Technisat Receiver)

I have TV recordings from a Technisat receiver, each consisting of two separate files: one for the recording itself and another that seems to contain EPG data. The EPG file is in a binary format, and ...
Mickey Lol's user avatar
-1 votes
1 answer
53 views

Show current position in disassembly with stepi command in GDB

I have a code which is already compiled and I don't have the libraries to compile it myself again. When I look into it with GDB, set a breakpoint and use the stepi (aka si) or nexti command, usually I ...
Alabama92's user avatar
-1 votes
0 answers
66 views

Basic buffer overflow works on host machine but fails under a docker container

I am seting up a docker environment to test buffer overflow vulnerabilities of several programs. In particular, I am trying to exploit a simple program that contains a call to strycpy, which is ...
RdlP's user avatar
  • 1,374
0 votes
0 answers
248 views

How to access Android/data folder on Android 13 without Root and PC?

I'm able to see the folder of Android/data but I can't access it once I open the folder. I can access it if I connect my phone to pc. But I love to reverse-engineer to my phone so I need to find ...
Serella's user avatar
0 votes
1 answer
49 views

What is the Name of this Process Analysis Software / What Type of Software is it?

As the title describes, does anyone know any information on this specific piece of software? I would like to find the literal software in the image. But could suffice with type of software for the ...
Tom Smith's user avatar
0 votes
0 answers
16 views

Getting or ignoring the key for the .ipa file

I'm trying to download the .ipa file via iptools, it shows an error that a license is needed, is there any way to ignore it or get a key? I understand that maybe this is a complex lesson, maybe ...
gg hh's user avatar
  • 1
-1 votes
0 answers
26 views

How to "proxy" serial com port between programm and physical device?

I have a programm that communicate with my device via usb cable and serial protocol. I've already tried use "Serial Port Monitor" software, but it doesn't work as I expected. Is there any ...
lkj 12's user avatar
  • 1
0 votes
0 answers
85 views

How to Dump Protected libil2cpp.so and Metadata from Application on Android without Root

I'm trying to reverse-engineer the app on Android. Unfortunately, the lib named libil2cpp.so and metadata is protected. When I try to dump using libil2cpp dumper online or any tools, the process fails ...
Serella's user avatar
1 vote
1 answer
63 views

What do _2_1_ and CONCAT11 mean in Ghidra?

I've been messing around with a program in Ghidra, and I came across these four lines of code. I found something about CONCAT11 meaning a concatenation between two one-byte operands, but I don't ...
SpaghettiMan's user avatar
0 votes
0 answers
30 views

Trying to get recaptcha token of a site gives error

This code is in the website $('#main-content').submit(function (event) { var sk = "6Le7HZQeAAAAANyVJZBpFKiWwDstptVGJ2aGbyMC"; event.preventDefault(); grecaptcha....
Cat Warrior's user avatar
0 votes
0 answers
46 views

Retriving all references of a varible inside code

What I am trying to achieve is to find all references of a variable and on what address this happens. The example does not make sense coding-wise but proves my point. mov ecx,dword ptr [kk (0E9D000h)] ...
Oliver Dahlén's user avatar
0 votes
0 answers
12 views

reverse engineering of MIPS assembly

I am third-year student and i have take a huge assignment about MIPS assembly . In all the section of my assignment , i see : reverse engineering. I have searched about it so much in the internet but ...
pro na's user avatar
  • 1
0 votes
0 answers
18 views

How to pass GAID (Google Advertising ID) into Google Search request

I want to programmatically search google for certain keywords and associate these requests with provided GAID (Google Advertising ID). So I can influence the advertising that Google shows me. But when ...
PATAPOsha's user avatar
  • 402
-2 votes
1 answer
67 views

how do i convert Smali files to readable classes

so i have used apktool to convert an .apk file basically reverse re-engeneering but the classes have come in smali files which is hard to interprate.how do i convert the files to readable code i have ...
Tommly Jumah's user avatar
0 votes
1 answer
47 views

calling a __thiscall DLL function from VC++ code

I have a DLL file to get reverse-engineered and I would like to call one of its functions (i.e. a class constructor) directly in my x86 C++ code. The reason is that I have no clue what the structure ...
Iman Abdollahzadeh's user avatar
0 votes
0 answers
118 views

Software copyright infringement

I've found a company in China selling a software that is clearly a copy of my own work. For context, this is actually a physical product that comes with a Ubuntu computer and the software pre-...
AndroC's user avatar
  • 4,784
1 vote
1 answer
54 views

Getting "fieldof" function when decompiling NET code with dnspy

I compiled some .NET in dnspy, and having some trouble with this statement fieldof(<PrivateImplementationDetails>{D87A3940-7D04-49D9-B7B7-2971825FAF29}.$$method0x6000519-1) I do understand this ...
Shhhh.3000's user avatar
0 votes
1 answer
29 views

How to delete a file in Objection (Frida on Android)?

How do I delete a file from the objection CLI? in the file operations there isn't a delete option as anticipated.
shluvme's user avatar
  • 731
0 votes
0 answers
133 views

How to debug a DLL in IDA Pro with 3 export functions

I have a 32bit DLL I am trying to debug. I set up my process options to use: Application: "C:\Windows\SysWoW64\rundll32.exe" Input file: the DLL I'm debugging Parameters: "C:...\...
user26117's user avatar
1 vote
1 answer
40 views

How do you set new values to every address you find in gdb with "find" at once?

Is there some loop syntax I could use? I'm searching for values at addresses with the find command, but rather than manually changing the values at each address it finds one at a time, I'd like to ...
Nathan Moyer's user avatar
0 votes
0 answers
9 views

Using Angr to extract the CFG of functions from the binaries

I started using angr and I am trying to extract the CFG of functions from the binary of a simple program but I can't find the symbol of any of the functions defined in source files in the detected ...
Mohamed ATEF-EMARA's user avatar
0 votes
0 answers
66 views

My flag is not displaying via terminal after completing an exploit in a ctf

To be as concise as possible, I am running a python exploit that passes all the checks that it needs to, but when the original ELF is supposed to write the flag to flag.txt, nothing gets displayed. I ...
thebigstapla's user avatar
0 votes
1 answer
95 views

Get literals from C++ binary

After compiling the C++ code int main(void) { const char * c = "abcdefghijklmnopqrstuvwxyz"; int a = 1234567890; float tau = 6.28318530718; bool yes = true; const char ca[...
Nico Schlömer's user avatar
1 vote
1 answer
79 views

How do I copy files from within a Frida-gadget cli?

In an un-rooted android environment the adb shell is limited to and confined to permissions granted to it. Therefore, when debugging an Frida-gadget app, sometimes it's the need to copy files from ...
Howard Jack's user avatar
0 votes
0 answers
41 views

find key in player.min.js to decode string

i am doing reverse engineering on a website which stream videos and found out that website is sending ajax request to fetch source of video and subtitles it is like this { "sources": "...
MUSIC HOLIC's user avatar
0 votes
0 answers
25 views

How to collect in memory strings of process which executes for a second and terminates

How to collect in memory strings of process which executes for a second and terminates in seconds?, if even not able to suspend it to check for in memory strings I was analyzing one malware file which ...
santosha's user avatar
0 votes
0 answers
40 views

Is there an easy way to identify c++ inner functions calls in arm64 assembly

I'm trying to reverse engineer a black box executable and currently I'm comparing it's content with another executable that I can compile identically to 1st exe. And now the issue is many function ...
Maksim Chekmarev's user avatar
0 votes
0 answers
35 views

Ghidra shows wrong information about executable in Windows

I am try to use Ghidra for reverse engineering. I successfully installed Ghidra from official repository and try to open my test.exe executable. After Drag & Drop my test.exe file into the Ghidra, ...
Samuel Smith's user avatar
0 votes
1 answer
29 views

How can I find the used CRC-16 method and polynomial for a packet of data?

I'm trying to find the method and polynomial that used in a packet of data like that: 00 00 41 xx xx yy yy ............................ ff The first bytes (00 00 41) is a magic number that is used at ...
Kamil B's user avatar
0 votes
0 answers
18 views

how to convert .ssj file or custom binary format video file into standard video file

I have a custom binary file with the .ssj extension, and I'm looking to convert it into a standard video format like MP4, AVI, or MKV. Unfortunately, there is no official documentation available for ...
rawan's user avatar
  • 1
0 votes
1 answer
62 views

Stack Layout in a CTF Challenge

So, basically i was looking at a solution for a CTF Challenge "unlimited_subway" from CSAW_CTF Quals 2023. Code of the solution looks like this: from pwn import * context.log_level = 'debug' ...
hwrryss's user avatar
1 vote
1 answer
52 views

How to list Directories from Frida?

Running from Frida Gadget I have very limited access to the file system and therefore would like to poke around and understand where I have read access to. Any idea's on how to print the content of ...
Howard Jack's user avatar
0 votes
0 answers
61 views

How to get m_PathID of an Object from a release Unity game?

I found that there's no easy way to use BepInEx to see m_PathID of a game object loaded from an asset package in a running release Unity game. So the question is: is there some way to do it or is it ...
curioususer's user avatar
0 votes
1 answer
81 views

how to Convert a .exe file to multiple assembly files at the function level?

I have an exe file and want to disassemble them. reverse engineering tools determine how many sections and functions this file consists of. Now I want to have those functions separately as files. Now ...
Homayoon Soleimani's user avatar
0 votes
0 answers
79 views

Why is function call terminating the debug process on IDA Freeware?

I am solving a Reverse Engineering capture the flag challenge where I have to find a flag in the format flag{thisistheflag}. Below is the link to a GitHub Repository that contains the given exe file ...
Dave Patel's user avatar
1 vote
0 answers
40 views

Deducting cpu type from dumped machine language

I have the motherboard from an office copying machine, and I'm dumping it's roms to try and figure it out (it has, like, atleast 3 seperate microcontrollers! It's WEIRD!) I have the rom dumped (well, ...
qwerty keyboard's user avatar
0 votes
0 answers
27 views

Using Native Android x86-64 shared libs on non-Android Linux

An APK I decompiled has Java that makes calls to C++ functions located in Android "native" shared libraries. These .so libs are compiled for both ARM and x86-64. I'd like to call some of the ...
Brendan's user avatar
  • 55
0 votes
0 answers
15 views

Set a column to updatable=false in hibernate generated via reverse engineering

I am trying to generate an entity via reverse engineering and there is a @JoinColumn field via @ManyToOne relationship that I want to mark as updatable="false" as due to MVP concept we don't ...
codeLover's user avatar
  • 2,564

1
2 3 4 5
78