Live data from Hacker News

Cutter – A Qt and C++ GUI for Radare2 reverse engineering framework

github.com

21–30 of 54 posts

Re: Cutter – A Qt and C++ GUI for Radare2 reverse engineering framework

#21

Earlier quoted context omitted.

>it's not really the type of tool you play with during the weekends I am not so sure I agree. I can take another example, CAD software. There are high powered industry standard softwares which I would love to use on weekends and maybe even use in side projects for profit, but there's no way I can pay $2k/year and justify that. A $2k permanent license? Sure, it's a stretch but I'd probably go for it. 180/month though,…

For free CAD, checkout OnShape if you don't mind all your drawings to be public. https://www.onshape.com/

Oh yes there's plenty of free CAD (for example, FreeCAD), but there are some truly excellent but insanely expensive tools out there too.

I would be happy to spend a large sum of money for a copy, but you can't any more. You have to buy a subscription.

If I can buy something excellent and know that I'll be able to use it, even if outdated, in 10 years, there's real value to an investment like that.

If I'm throwing several dollars a day into a hole for something I'll probably only use sometimes, and at that, perhaps taking years between uses, I can't justify the expense.

Something like how I bought the best cordless drill I could find. Not because I use it every day, or even every month, but because I wanted my drilling experience to be good every time I used it.

If you have good tools you're more likely to do things and do them well.

People give the same advice about guitars. Don't buy a cheap guitar if you want to pick up the skill. It will be difficult to tune, it won't keep a tune, and it won't sound great whatever you do. Buy a good guitar and what you do will sound better and encourage you to keep it up and get better.

A lot of free software tools are the same. They can do what they do, but their flaws discourage use and make failure as a beginner a lot more likely.

There is probably an optimum there. Not so refined as to be too expensive to be accessible to most people and not so rudimentary as to turn away people who try with low success.

Re: Cutter – A Qt and C++ GUI for Radare2 reverse engineering framework

#22
post #2

Cutter is "A Qt and C++ GUI for radare2". There are more alternatives to IDA Pro. Hopper Disassembler is one. Binary Ninja (binja) is another. Here is an independent review of Binary Ninja: https://www.trailofbits.com/research-and-development/binja/ Here is the project itself: https://binary.ninja/ I happen to know most of the people involved in Binary Ninja. They do great work. They really understand security and th…

> BTW, if disassembly is a career interest for you, see https://news.ycombinator.com/item?id=17208556 for my "Ask HN: Who is hiring? (June 2018)" comment.

You're doing "God's Work". I wish I was even remotely qualified to do this sorta thing because I'm pretty interested in it, but I'm pretty far removed from it (large scale infrastructure architecture).

Do you mind if I email you some questions as far as good ways to start tracking in that direction? (though you pretty much enumerated them in the transferable skills part)

Re: Cutter – A Qt and C++ GUI for Radare2 reverse engineering framework

#23

Earlier quoted context omitted.

Reverse engineering has been a constant interest for me but I've never managed to get it to "click" for me. I don't particularly need the skill, but it's one I'd like to have (at least to the extent of being able to do simple crackmes).

My earliest exposure to computers was the ZX Spectrum, an 8-bit home-computer from the 80s, which was insanely populare in the UK. Having few games, and little budget for more, most of the kids around would swap home-copied games. I used to have fun removing protection, or hacking the games for infinite lives. At the time I was 12-15 and it was very much a case of trial or error. Assuming a game started with 3 lives…

Random aside: I'm constantly impressed by the output of the HCU folks and sorely wish that both the community around HCU and +Fravia were still around.

Re: Cutter – A Qt and C++ GUI for Radare2 reverse engineering framework

#24
post #2

Cutter is "A Qt and C++ GUI for radare2". There are more alternatives to IDA Pro. Hopper Disassembler is one. Binary Ninja (binja) is another. Here is an independent review of Binary Ninja: https://www.trailofbits.com/research-and-development/binja/ Here is the project itself: https://binary.ninja/ I happen to know most of the people involved in Binary Ninja. They do great work. They really understand security and th…

> There are more alternatives to IDA Pro. Hopper Disassembler is one. Binary Ninja (binja) is another.

Sure, but radare2 is open source which cuts both ways I suppose. IDA feels significantly more polished than r2, but I've had fun implementing a not-so-common-anymore architecture as a set of r2 plugins.

There's also the free version of IDA (x86 only though).

Re: Cutter – A Qt and C++ GUI for Radare2 reverse engineering framework

#25
post #8

Earlier quoted context omitted.

Sure, but it's not really the type of tool you play with during the weekends. It's high powered and the industry standard. I, and many of my colleagues, would gladly play 4 or 5 times the price for IDA and Hex Rays. Though, any decent security company will purchase a subscription for it's employees.

>it's not really the type of tool you play with during the weekends I am not so sure I agree. I can take another example, CAD software. There are high powered industry standard softwares which I would love to use on weekends and maybe even use in side projects for profit, but there's no way I can pay $2k/year and justify that. A $2k permanent license? Sure, it's a stretch but I'd probably go for it. 180/month though,…

If you're not worried about the ethical implications, Autodesk doesn't verify student info for their free student licenses.

Re: Cutter – A Qt and C++ GUI for Radare2 reverse engineering framework

#26

Earlier quoted context omitted.

>it's not really the type of tool you play with during the weekends I am not so sure I agree. I can take another example, CAD software. There are high powered industry standard softwares which I would love to use on weekends and maybe even use in side projects for profit, but there's no way I can pay $2k/year and justify that. A $2k permanent license? Sure, it's a stretch but I'd probably go for it. 180/month though,…

If you're not worried about the ethical implications, Autodesk doesn't verify student info for their free student licenses.

Fusion 360 is free for hobbiests. Not just students.

If I _wanted_ to be unethical, I could surely get anything I wanted.

I want to buy something and be in good standing to use it to perhaps build something to sell.

Re: Cutter – A Qt and C++ GUI for Radare2 reverse engineering framework

#27
post #16
post #8

Earlier quoted context omitted.

Sure, but it's not really the type of tool you play with during the weekends. It's high powered and the industry standard. I, and many of my colleagues, would gladly play 4 or 5 times the price for IDA and Hex Rays. Though, any decent security company will purchase a subscription for it's employees.

Last I checked, they didn't do group subscriptions; you buy named licenses for each team member, and they're pretty unpleasant about the process.

They won't do unlimited licenses or subscriptions at all, but you can get group licenses (with license server) and support subscriptions. Your three choices are:

a. license server

b. licensed to a specific person

c. licensed to a specific computer

They are indeed pretty unpleasant about the process. They've been burned by license violations.

Re: Cutter – A Qt and C++ GUI for Radare2 reverse engineering framework

#29
post #28

I wish there would be some App/Website similar to DragonBox [1] but to learn assembler instead of math ;-) [1]: https://dragonbox.com/products/algebra-12

TIS-100 by Zachtronics is a game based around a very small instruction set assembly language on an interesting architecture.

Shenzhen I/O is also meant to be good, but I haven't played it.

Neither are even close in complexity or sheer number of instructions to x86, but then I get the sense that x86 tends to put people off assembly in a way that simpler architectures don't.

Re: Cutter – A Qt and C++ GUI for Radare2 reverse engineering framework

#30
I discovered Radare2 some years ago, and found that Cutter strongly lowers the learning curve of r2.

On that note, I used to play (as a n00b) to some crackmes and ctf, but not having kept up to date I can't find a live replacement for crackmes.de (or .cf today...still an archive though). Any suggestions of current resources to "play" with r2 and Cutter?

Post reply on HN