Live data from Hacker News

Reverse engineering guide for beginners: Methodology and tools

0x00sec.org

51–60 of 70 posts

Re: Reverse engineering guide for beginners: Methodology and tools

#51
post #33

Earlier quoted context omitted.

(Hopper is also $99.)

Ah, yeah. I totally forgot about hopper. I've never used it, but it looks nice, especially for Objective C and Swift.

I'm sad that Windows support for Hopper was discontinued.

Re: Reverse engineering guide for beginners: Methodology and tools

#53
post #46

Upvote if you grew up on Fravia and tKC

Was going to mention Fravia. He died in 2009 if you weren't aware, age 56.

Website here: http://acrigs.com/FRAVIA/index-old.htm

+ORC ( https://en.wikipedia.org/wiki/Old_Red_Cracker ) always interested me. Like Satoshi Nakomoto, he has never been identified. Fravia's site has his tutorials here: http://acrigs.com/FRAVIA/orc1.htm

Some pretty serious old school hackers.

Re: Reverse engineering guide for beginners: Methodology and tools

#54
post #30

After brushing up on this, if you're looking for something "fun" to work through, the NSA's 2016 Codebreaker challenge is good, granted you have a .edu email address (only US .edu too, unfortunately). https://codebreaker.ltsnet.net/challenge I think they're going to be keeping the 2016 version up for a while longer. They generally start a new one in September each year.

Damn, too bad they don't accept .ac.uk addresses :( I feel like there should be a standardised way to ensure users are students/affiliated with an educational institution (maybe an international federation on top of SAML a la the UK Access Management Federation). I guess at the end of the day the NSA want students in the US, who are likely US citizens and thus eligible for a job.

> I feel like there should be a standardised way to ensure users are students/affiliated with an educational institution

There's ISIC (International Student Identity Card) [1], but I don't imagine it's used widely.

[1] https://www.myisic.com/isic-card/

Re: Reverse engineering guide for beginners: Methodology and tools

#55

After brushing up on this, if you're looking for something "fun" to work through, the NSA's 2016 Codebreaker challenge is good, granted you have a .edu email address (only US .edu too, unfortunately). https://codebreaker.ltsnet.net/challenge I think they're going to be keeping the 2016 version up for a while longer. They generally start a new one in September each year.

Frankly, Micro-corruption, and crypto-pals is way better if you are looking for something to spend your time on for learning.

https://microcorruption.com

https://cryptopals.com/

Re: Reverse engineering guide for beginners: Methodology and tools

#56
post #38

orthogonal : I honestly wish CMU would release the lectures and full class materials for 15-213 (the course most typically associated with the bomb lab mentioned here). The lectures combined with the accompanying text and labs form a masterpiece, and it's a shame the community at large can't take better advantage of it. It's like SICP for systems : that effing good. The tests, however, are just awful. Those can safel…

hackermailman's post elsewhere in these comments links to: http://csapp.cs.cmu.edu/3e/labs.html https://news.ycombinator.com/item?id=14522391 which further links to lectures: https://scs.hosted.panopto.com/Panopto/Pages/Sessions/List.a...

Re: Reverse engineering guide for beginners: Methodology and tools

#57
post #52

I highly recommend this guide on how Samba was written, describing the techniques involved on RE [0]. [0] - https://www.samba.org/ftp/tridge/misc/french_cafe.txt

Thanks so much. I respect Samba developers so much for how we take them, and Wine devs for granted, and especially Tridge for RE'ing the Bitkeeper protocol and taking heat from Linus and indirectly leading to git with his unstoppable curiosity.

Re: Reverse engineering guide for beginners: Methodology and tools

#58
post #38

orthogonal : I honestly wish CMU would release the lectures and full class materials for 15-213 (the course most typically associated with the bomb lab mentioned here). The lectures combined with the accompanying text and labs form a masterpiece, and it's a shame the community at large can't take better advantage of it. It's like SICP for systems : that effing good. The tests, however, are just awful. Those can safel…

Even if you can't get access to this course, I highly recommend that you read the text book for it.

Computer Systems: A Programmer's Perspective: https://www.amazon.com/Computer-Systems-Programmers-Perspect...

It's one of the best books ever written on this subject.

One of my courses at UQ (Australia) followed some of it and I'm glad that I took it. There's no better way to asses the skills involved in debugging/analyzing machine dumps than the binary bomb assignment.

Re: Reverse engineering guide for beginners: Methodology and tools

#59

An excellent introduction to Windows reverse engineering are lena151's video tutorials: https://tuts4you.com/download.php?list.17

I learned a lot from lena151's tutorials 8 years ago but I'm not sure if her tutorials could work on Windows 10.

Re: Reverse engineering guide for beginners: Methodology and tools

#60

An excellent introduction to Windows reverse engineering are lena151's video tutorials: https://tuts4you.com/download.php?list.17

I learned a lot from lena151's tutorials 8 years ago but I'm not sure if her tutorials could work on Windows 10.

I don't see why not. What problems are you having?
Post reply on HN