Skip to content
🎉 Welcome! Enjoy your reading, and I hope you will learn something new.
Learning Notes
Reverse Engineering

Reverse Engineering (RE)

Tools

ToolDescription
AngrPython framework for symbolic execution and binary analysis
TritonDynamic binary analysis and symbolic execution library
Qu1cksc0peAll-in-one malware analysis and threat inspection tool

Command line

ToolDescription
ltraceTraces library calls made by a program
straceMonitors system calls and signals
ptraceLinux syscall interface for debugging processes
fileIdentifies file types from signatures and metadata
stringsExtracts printable text strings from binaries
readelfDisplays ELF binary structure and metadata
objdumpDisassembles and inspects binary object files

Disassemblers

ToolDescription
GhidraOpen-source reverse engineering and decompiler suite
IDAInteractive disassembler and reverse engineering tool
Binary NinjaReverse engineering platform with modern analysis UI
Radare2Command-line framework for binary analysis and exploitation

Online

ToolDescription
Compiler ExplorerOnline compiler explorer with assembly output comparison
Decompiler ExplorerOnline platform comparing multiple decompilers
CPUlatorBrowser-based CPU and computer system simulator

Nix - Flake environment

flake.nix
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53

{
  description = "Reverse Environment";
  inputs = {
    nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
    flake-utils.url = "github:numtide/flake-utils";
  };

  outputs =
    {
      self,
      nixpkgs,
      flake-utils,
    }:
    flake-utils.lib.eachDefaultSystem (
      system:
      let
        pkgs = nixpkgs.legacyPackages.${system};
      in
      {
        devShells.default = pkgs.mkShell {
          buildInputs = with pkgs; [
            ropgadget
            python313Packages.pwntools
            python313Packages.ropper
            python313Packages.z3-solver
            python313Packages.frida-python
            jadx
            frida-tools
            python313Packages.unicorn-angr
            python313Packages.unicorn
            python313Packages.capstone
            capstone
            unicorn
            unicorn-angr
            python313Packages.qiling
            gdb
            imhex
            ida-free
            ghidra
            ghidra-bin
            binaryninja-free
            python313Packages.pyhidra
            gef
            qemu
            qemu-utils
            qemu-user
            python313Packages.angr
            python313Packages.miasm
          ];
        };
      }
    );
}

Resources

Last updated on