Questions tagged [reverse-engineering]
Reverse engineering is the process of discovering the technological principles of a human made device, object or system through analysis of its structure, function and operation.
3,895
questions
0
votes
0
answers
11
views
Inquiry about AZSPWM1 Implementation on TMS320F28335 for induction machine
I am currently working on implementing the AZSPWM1 (Active Zero State PWM) method on the C2000 from TI microcontroller for a spindle motor.
I have been following the relevant documentation and ...
-2
votes
0
answers
34
views
I need help to decode the flag in the function __decode_flag . It is also given a hint .i cant find the solution for the XOR part
import base64
import binascii
decodedFlag = 'That would have been too easy ^^'
encodedFlag = b'...
0
votes
0
answers
25
views
Running the dll file of the "Fanny worm" virus
I'm studying virus testing at university. I was given the task to investigate the "Fanny Worm" virus from the "Equation Group". For testing, I found a file dll_installer.dll ...
0
votes
0
answers
66
views
private key protection in c++ shared library
I am building a C++ shared Library which will be used to decrypt the encrypted file using a symmetric cryptographic Algorithm.
My question is how should I store my private key in library. If I'll ...
0
votes
0
answers
5
views
Find vmaddr_slide of main app binary externally (Apple iOS)
is there any way to find vmaddr_slide of main app binary externally? i'm on jailbroken iOS and already obtained read/write to app. i've obtained header address of app via checking the first region in ...
0
votes
0
answers
24
views
What are the numbers near the registers mean in assembly? [duplicate]
Hopefully this question is suitable for this forum. I'm very new to assembly. So, I'm trying to change some of the code of the game in cheat engine. Lets say for example we have something like this in ...
0
votes
0
answers
16
views
Is it possible to advertise an mDNS service with invalid name / type?
I'm trying to recreate some functionality of NearDrop, a MacOS app to interact with Android NearbyShare functionality.
Namely, I want to create a program that's visible in NearbyShare.
The repo has a ...
0
votes
0
answers
22
views
Extracting protobuf files/protocols from an APK
I've been trying to reverse-engineer an Android API blah blah blah, and I'm trying to extract the protobuf files for it, however I can't find any references of it in the decompiled code or resources ...
0
votes
0
answers
29
views
unable to find native module in /proc/.../maps for Android NDK app
I made a sample NDK hello world application via Android Studio (simply used the one straight from the wizard). Everything works fine and I'm able to communicate with the native module (hello_ndk.so). ...
0
votes
0
answers
23
views
Eclipse + maven + hibernate-tools Reverse Engineering error
I'm trying to use the reverse engineering tool of the hibernate-tools suite to generate all the model of the tables in a PostgreSQL DB.
I followed this guide https://www.codejava.net/frameworks/...
0
votes
0
answers
15
views
Access React component variable from Devtools in production build
Given third party site that I'd like to extend its functionality through Chrome Extension,
How can I access React Component variable from outside the app, through DevTools code snippets maybe ?
I'd ...
0
votes
1
answer
89
views
Learning RISC-V assembly and need help converting a C loop
I'm learning how to convert RISC-V assembly code to C, and I don't understand this conversion. A few questions I have:
why is t1 being initialized to 6 instead of 0?
We're using bne to compare t1 and ...
-1
votes
0
answers
13
views
Decoding and Extracting Information from Binary TV Recording Files (Technisat Receiver)
I have TV recordings from a Technisat receiver, each consisting of two separate files: one for the recording itself and another that seems to contain EPG data. The EPG file is in a binary format, and ...
-1
votes
1
answer
53
views
Show current position in disassembly with stepi command in GDB
I have a code which is already compiled and I don't have the libraries to compile it myself again.
When I look into it with GDB, set a breakpoint and use the stepi (aka si) or nexti command, usually I ...
-1
votes
0
answers
66
views
Basic buffer overflow works on host machine but fails under a docker container
I am seting up a docker environment to test buffer overflow vulnerabilities of several programs. In particular, I am trying to exploit a simple program that contains a call to strycpy, which is ...
0
votes
0
answers
248
views
How to access Android/data folder on Android 13 without Root and PC?
I'm able to see the folder of Android/data but I can't access it once I open the folder. I can access it if I connect my phone to pc. But I love to reverse-engineer to my phone so I need to find ...
0
votes
1
answer
49
views
What is the Name of this Process Analysis Software / What Type of Software is it?
As the title describes, does anyone know any information on this specific piece of software? I would like to find the literal software in the image. But could suffice with type of software for the ...
0
votes
0
answers
16
views
Getting or ignoring the key for the .ipa file
I'm trying to download the .ipa file via iptools, it shows an error that a license is needed, is there any way to ignore it or get a key? I understand that maybe this is a complex lesson, maybe ...
-1
votes
0
answers
26
views
How to "proxy" serial com port between programm and physical device?
I have a programm that communicate with my device via usb cable and serial protocol.
I've already tried use "Serial Port Monitor" software, but it doesn't work as I expected.
Is there any ...
0
votes
0
answers
85
views
How to Dump Protected libil2cpp.so and Metadata from Application on Android without Root
I'm trying to reverse-engineer the app on Android. Unfortunately, the lib named libil2cpp.so and metadata is protected. When I try to dump using libil2cpp dumper online or any tools, the process fails ...
1
vote
1
answer
63
views
What do _2_1_ and CONCAT11 mean in Ghidra?
I've been messing around with a program in Ghidra, and I came across these four lines of code. I found something about CONCAT11 meaning a concatenation between two one-byte operands, but I don't ...
0
votes
0
answers
30
views
Trying to get recaptcha token of a site gives error
This code is in the website
$('#main-content').submit(function (event) {
var sk = "6Le7HZQeAAAAANyVJZBpFKiWwDstptVGJ2aGbyMC";
event.preventDefault();
grecaptcha....
0
votes
0
answers
46
views
Retriving all references of a varible inside code
What I am trying to achieve is to find all references of a variable and on what address this happens.
The example does not make sense coding-wise but proves my point.
mov ecx,dword ptr [kk (0E9D000h)] ...
0
votes
0
answers
12
views
reverse engineering of MIPS assembly
I am third-year student and i have take a huge assignment about MIPS assembly . In all the section of my assignment , i see : reverse engineering.
I have searched about it so much in the internet but ...
0
votes
0
answers
18
views
How to pass GAID (Google Advertising ID) into Google Search request
I want to programmatically search google for certain keywords and associate these requests with provided GAID (Google Advertising ID). So I can influence the advertising that Google shows me.
But when ...
-2
votes
1
answer
67
views
how do i convert Smali files to readable classes
so i have used apktool to convert an .apk file basically reverse re-engeneering but the classes have come in smali files which is hard to interprate.how do i convert the files to readable code
i have ...
0
votes
1
answer
47
views
calling a __thiscall DLL function from VC++ code
I have a DLL file to get reverse-engineered and I would like to call one of its functions (i.e. a class constructor) directly in my x86 C++ code. The reason is that I have no clue what the structure ...
0
votes
0
answers
118
views
Software copyright infringement
I've found a company in China selling a software that is clearly a copy of my own work. For context, this is actually a physical product that comes with a Ubuntu computer and the software pre-...
1
vote
1
answer
54
views
Getting "fieldof" function when decompiling NET code with dnspy
I compiled some .NET in dnspy, and having some trouble with this statement
fieldof(<PrivateImplementationDetails>{D87A3940-7D04-49D9-B7B7-2971825FAF29}.$$method0x6000519-1)
I do understand this ...
0
votes
1
answer
29
views
How to delete a file in Objection (Frida on Android)?
How do I delete a file from the objection CLI? in the file operations there isn't a delete option as anticipated.
0
votes
0
answers
133
views
How to debug a DLL in IDA Pro with 3 export functions
I have a 32bit DLL I am trying to debug. I set up my process options to use:
Application: "C:\Windows\SysWoW64\rundll32.exe"
Input file: the DLL I'm debugging
Parameters: "C:...\...
1
vote
1
answer
40
views
How do you set new values to every address you find in gdb with "find" at once?
Is there some loop syntax I could use?
I'm searching for values at addresses with the find command, but rather than manually changing the values at each address it finds one at a time, I'd like to ...
0
votes
0
answers
9
views
Using Angr to extract the CFG of functions from the binaries
I started using angr and I am trying to extract the CFG of functions from the binary of a simple program but I can't find the symbol of any of the functions defined in source files in the detected ...
0
votes
0
answers
66
views
My flag is not displaying via terminal after completing an exploit in a ctf
To be as concise as possible, I am running a python exploit that passes all the checks that it needs to, but when the original ELF is supposed to write the flag to flag.txt, nothing gets displayed. I ...
0
votes
1
answer
95
views
Get literals from C++ binary
After compiling the C++ code
int main(void)
{
const char * c = "abcdefghijklmnopqrstuvwxyz";
int a = 1234567890;
float tau = 6.28318530718;
bool yes = true;
const char ca[...
1
vote
1
answer
79
views
How do I copy files from within a Frida-gadget cli?
In an un-rooted android environment the adb shell is limited to and confined to permissions granted to it. Therefore, when debugging an Frida-gadget app, sometimes it's the need to copy files from ...
0
votes
0
answers
41
views
find key in player.min.js to decode string
i am doing reverse engineering on a website which stream videos and found out that website is sending ajax request to fetch source of video and subtitles it is like this
{
"sources": "...
0
votes
0
answers
25
views
How to collect in memory strings of process which executes for a second and terminates
How to collect in memory strings of process which executes for a second and terminates in seconds?, if even not able to suspend it to check for in memory strings
I was analyzing one malware file which ...
0
votes
0
answers
40
views
Is there an easy way to identify c++ inner functions calls in arm64 assembly
I'm trying to reverse engineer a black box executable and currently I'm comparing it's content with another executable that I can compile identically to 1st exe.
And now the issue is many function ...
0
votes
0
answers
35
views
Ghidra shows wrong information about executable in Windows
I am try to use Ghidra for reverse engineering. I successfully installed Ghidra from official repository and try to open my test.exe executable. After Drag & Drop my test.exe file into the Ghidra, ...
0
votes
1
answer
29
views
How can I find the used CRC-16 method and polynomial for a packet of data?
I'm trying to find the method and polynomial that used in a packet of data like that:
00 00 41 xx xx yy yy ............................ ff
The first bytes (00 00 41) is a magic number that is used at ...
0
votes
0
answers
18
views
how to convert .ssj file or custom binary format video file into standard video file
I have a custom binary file with the .ssj extension, and I'm looking to convert it into a standard video format like MP4, AVI, or MKV. Unfortunately, there is no official documentation available for ...
0
votes
1
answer
62
views
Stack Layout in a CTF Challenge
So, basically i was looking at a solution for a CTF Challenge "unlimited_subway" from CSAW_CTF Quals 2023. Code of the solution looks like this:
from pwn import *
context.log_level = 'debug'
...
1
vote
1
answer
52
views
How to list Directories from Frida?
Running from Frida Gadget I have very limited access to the file system and therefore would like to poke around and understand where I have read access to.
Any idea's on how to print the content of ...
0
votes
0
answers
61
views
How to get m_PathID of an Object from a release Unity game?
I found that there's no easy way to use BepInEx to see m_PathID of a game object loaded from an asset package in a running release Unity game.
So the question is: is there some way to do it or is it ...
0
votes
1
answer
81
views
how to Convert a .exe file to multiple assembly files at the function level?
I have an exe file and want to disassemble them. reverse engineering tools determine how many sections and functions this file consists of.
Now I want to have those functions separately as files. Now ...
0
votes
0
answers
79
views
Why is function call terminating the debug process on IDA Freeware?
I am solving a Reverse Engineering capture the flag challenge where I have to find a flag in the format flag{thisistheflag}. Below is the link to a GitHub Repository that contains the given exe file ...
1
vote
0
answers
40
views
Deducting cpu type from dumped machine language
I have the motherboard from an office copying machine, and I'm dumping it's roms to try and figure it out (it has, like, atleast 3 seperate microcontrollers! It's WEIRD!)
I have the rom dumped (well, ...
0
votes
0
answers
27
views
Using Native Android x86-64 shared libs on non-Android Linux
An APK I decompiled has Java that makes calls to C++ functions located in Android "native" shared libraries. These .so libs are compiled for both ARM and x86-64. I'd like to call some of the ...
0
votes
0
answers
15
views
Set a column to updatable=false in hibernate generated via reverse engineering
I am trying to generate an entity via reverse engineering and there is a @JoinColumn field via @ManyToOne relationship that I want to mark as updatable="false" as due to MVP concept we don't ...