I started with these series of tutorials:
https://tuts4you.com/e107_plugins/download/download.php?list...
Purely hands-on. Old school. Use virtual box.
Reverse engineering course
51–57 of 57 posts
Re: Reverse engineering course
#52I used to dabble in Cheat Engine, Tsearch, and IDA Pro, for reversing games. Recently, a nice guy randomly showed me a demo of a modern tool called radare[1]. I was floored by the IDA-like flow-diagrams that it spit out in the terminal[2], and the short commands for navigating/bookmarking/documenting. Nice to see hobbyists don't need to buy IDA anymore! [1]: https://www.radare.org/r/ [2]: https://www.radare.org/r/img…
Dude, look at Ghidra. The reverse engineering world has massively changed in the last year.
Radare is great and I use it as well, but Ghidra brings a whole lot of new capability and its straight up free.
Re: Reverse engineering course
#53I used to dabble in Cheat Engine, Tsearch, and IDA Pro, for reversing games. Recently, a nice guy randomly showed me a demo of a modern tool called radare[1]. I was floored by the IDA-like flow-diagrams that it spit out in the terminal[2], and the short commands for navigating/bookmarking/documenting. Nice to see hobbyists don't need to buy IDA anymore! [1]: https://www.radare.org/r/ [2]: https://www.radare.org/r/img…
Dude, look at Ghidra. The reverse engineering world has massively changed in the last year. Radare is great and I use it as well, but Ghidra brings a whole lot of new capability and its straight up free.
Thanks! An NSA project, named after Godzilla’s archenemy. Also:
> Ghidra's existence was originally revealed to the public via WikiLeaks in March 2017
Re: Reverse engineering course
#54Anyone have links to similar resources, but for Linux instead of Windows?
Self plug: https://www.reversinghero.com
Learn reverse engineering by solving 15 challenges.
Re: Reverse engineering course
#55RPISEC RE/VR courses (a little scattered due to the passage of time): Secure Software Principles - CSCI 4971, Spring 2010: http://www.cs.rpi.edu/academics/courses/spring10/csci4971/ Malware Analysis - CSCI 4972/6963, Spring 2013: http://security.cs.rpi.edu/courses/malware-spring2013/ Advanced Exploitation and Rootkit Development, Spring 2013: http://security.cs.rpi.edu/~candej2/ Program Obfuscation, Fall 2013: http:/…
This is great! Do you have other related curated lists that you're willing to share?
Yes! That's like half my job as a teacher. Let me scrounge around, polish what I got, and put it on Github.
Re: Reverse engineering course
#56Always thought reversing is fun. Back in high school and college I would spend days or weeks trying to reverse random software packages I had installed on my system. It was pretty surprising how, with a few tools like OllyDBG, 90% of the software I attempted to crack was actually crackable. Most of Autodesk's software was ridiculously easy to crack. (Don't worry, I owned all that software already! I was studying anim…
Yes, I have used it at my previous job (recently got fired) and it was really helpful. Of course, you need physical access to the application to make this work, e.g. it's much harder to do for some oddly behaving REST Api.
Re: Reverse engineering course
#57Earlier quoted context omitted.
This is great! Do you have other related curated lists that you're willing to share?
Yes! That's like half my job as a teacher. Let me scrounge around, polish what I got, and put it on Github.
Excellent! Thanks. I followed the links on Github, btw. I'm looking into some of the trainings you're offering.
Last August, I took the Advanced Windows Exploitation course from Offensive Security (for the OSEE), and then I followed it up with the awesome Advanced Fuzzing and Crash Analysis course taught by Richard Johnson. Both were incredible courses, but my RE sucks.
I'm looking at the Advanced Browser Exploitation course next, but I'd really like to get better with reversing in order to get more out of these classes.