Live data from Hacker News

Linux Reverse Engineering CTFs for Beginners

osandamalith.com

21–30 of 32 posts

Re: Linux Reverse Engineering CTFs for Beginners

#21

I recommend anyone who is attempting to do a ctf reversing challenge to checkout r2. https://rada.re/r/ It's a free and open source set of tools specifically for reverse engineering. There are some commercial options as well such as HexRays IDA Pro (probably the defacto standard tool) and binary ninja.

Or wait for the RSA conference in March and go crazy with Ghidra.

Re: Linux Reverse Engineering CTFs for Beginners

#23

I recommend anyone who is attempting to do a ctf reversing challenge to checkout r2. https://rada.re/r/ It's a free and open source set of tools specifically for reverse engineering. There are some commercial options as well such as HexRays IDA Pro (probably the defacto standard tool) and binary ninja.

Do you use Cutter or the CLI?

Re: Linux Reverse Engineering CTFs for Beginners

#24
post #20

As someone who is not very knowledgeable about the field, I find reverse engineering fascinating. One thing I've been curious about is the economics of the security industry and the role reverse engineering plays in it. To my novice eyes it seems that reverse engineering is more of an academic exercise and I don't see any direct ways to commercialize that skillset. How do you make a living doing this? Are you essenti…

Reverse engineering can be as simple as, hey this code is supposed to be fast but it's slow, and I wonder what the compiler is doing to my code. So you compile the code, reverse engineer it and see what the compiler is emitting. That way you can steer the compiler into the right path. This is very useful for micro optimizations.

Just save the intermediate assembly files, with all helpful annotations, and analyze those. Much easier!

Re: Linux Reverse Engineering CTFs for Beginners

#26

As someone who is not very knowledgeable about the field, I find reverse engineering fascinating. One thing I've been curious about is the economics of the security industry and the role reverse engineering plays in it. To my novice eyes it seems that reverse engineering is more of an academic exercise and I don't see any direct ways to commercialize that skillset. How do you make a living doing this? Are you essenti…

There are plenty of money to be made, just not in the way you typically do with other kinds of software. For example, a company named Bossland reversed many popular games and made bots for those. Their most recent effort was Pokémon Go. Nobody has reversed the newest versions of Pokémon Go and I believed you can make millions off it if you play your cards right.

Re: Linux Reverse Engineering CTFs for Beginners

#27

For Beginners, I'd begin with defining "CTF". I don't see that defined anywhere in the article. From some googling, I guess it's a "Capture the Flag" challenge? It's worth stepping back and explaining that general concept.

this is now an hn trope (complaining about some jargon in the title). newsflash the meaning of the title isn't "Linux reverse engineering for beginning humans that don't know anything about the universe, language, or electricity" because then you'd need to define Linux and engineering as well. the meaning of the title is always "____ thing for people that know a little about ____ thing but not everything". i think it…

This is often true, but if the article is "for Beginners" (it is even in the title), one would expect the article to explain what the acronym CTF is, somewhere near the beginning.

Re: Linux Reverse Engineering CTFs for Beginners

#28

I recommend anyone who is attempting to do a ctf reversing challenge to checkout r2. https://rada.re/r/ It's a free and open source set of tools specifically for reverse engineering. There are some commercial options as well such as HexRays IDA Pro (probably the defacto standard tool) and binary ninja.

IDA also has a freeware version (that has some restrictions) https://www.hex-rays.com/products/ida/support/download_freew...

Re: Linux Reverse Engineering CTFs for Beginners

#30
post #24
post #20

Earlier quoted context omitted.

Reverse engineering can be as simple as, hey this code is supposed to be fast but it's slow, and I wonder what the compiler is doing to my code. So you compile the code, reverse engineer it and see what the compiler is emitting. That way you can steer the compiler into the right path. This is very useful for micro optimizations.

Just save the intermediate assembly files, with all helpful annotations, and analyze those. Much easier!

Once you are used to reading assembly, there's not much difference between reading the output of objdump -d and gcc -S.
Post reply on HN