Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [reverse-engineering]

Reverse engineering is the process of discovering the technological principles of a human made device, object or system through analysis of its structure, function and operation.

0
votes
1answer
58 views

Is it possible to extract secret key in compiled code automatically?

If we have a program that contains a secret key in its compiled code, is it possible to write a program that can automatically extract the secret key? Let's assume that the program contains a secret ...
1
vote
0answers
43 views

Problem with Reverse Engineering GVM light, possibly encoding issue

So I bought this GVM-560AS LED photography light on Amazon. It is a really good light for the job; but to control it remotely you have to download a really dodgy APK from the GVM website, a package ...
-3
votes
1answer
72 views

How to test for Android app reverse engineering vulnerability

I'm an Android developer who knows how to work with Android SDK and Android studio as an IDE. I am familiar with Proguard and Dexguard tools related to obfuscation of code. My Case: I've ...
1
vote
1answer
666 views

Does GHIDRA have a debugger?

Does GHIDRA have a debugger attached for dynamic analysis of application?
9
votes
1answer
1k views

What is the difference between Ghidra and Ida?

Is there a comparison between Ghidra and Ida? Are there any specific features and functionality that Ghidra while Ida doesn't? Is there a good source (most preferably book) that explain Ghidra in ...
1
vote
0answers
36 views

Android Exploit Development Lab [closed]

Looking to setup an exploit development environment to do the following: Fuzz Android libraries to find new vulnerabilities Re-create already existing bugs/vulnerabilities based on bug fixes found on ...
7
votes
0answers
127 views

Protection against Android Reverse Engineering

I have been particularly trying to find the most effective measures to protect an apk from Reverse engineering and abusive use. While continuing my research I came across various top rated apps and ...
0
votes
0answers
26 views

Unkown encryption type? [duplicate]

200 character long string ...
1
vote
0answers
27 views

Is there a way to refuse Process Hooking on jailbroken iOS devices

I want to find a way to prevent apps from Cycript attaching. So far I know Cycript works as below, but I can not find a way to stop Cycript. One method to stop injection is to add -Wl,-sectcreate,...
1
vote
0answers
12 views

Is there a way to refuse Process Hooking on JailBreak IOS devices

I want to find a way to prevent apps from Cycript attaching. So Far I Know Cycript works as below, but I can not find a way to stop Cycript. One method to stop injection is to add "-Wl,-sectcreate,...
0
votes
3answers
184 views

Does exploit development have a future? [closed]

Does exploit development have a future? I mean there are a lot of fuzzers and they can find bugs better and with less time than humans. And today's there are lots of great fuzzers. I love exploit ...
1
vote
0answers
36 views

Limited ESP Length in Buffer Overflow Sample C Program

May I know how to increase the length of ESP on a sample c program which allows me to execute shellcode on the stack. However, as of now, the sample c program only has an ESP length of 61 thus ...
1
vote
0answers
174 views

Capturing HTTP Traffic Through Proxy Sever

While performing the security assessment on an Android application(UAT Environment), I'm unable to capture the HTTP traffic through proxy server(Burp Suite/OWASP Zap). There is no point of ...
1
vote
1answer
40 views

Masking configuration of physical workstation

Environment: Physical workstation, HP, Dell, etc Windows 7,8,10, no matter Windows executables Our goal: For additional privacy, is it possible to wipe/change all configuration that can be read by ...
3
votes
1answer
54 views

Running a brief asm script inline for dynamic analysis

Is there any good reason not to run a brief unknown (30 line) assembly script inline in a usermode c program for dynamic analysis directly on my laptop? There's only one system call to time, and at ...
1
vote
2answers
120 views

Why does my stack contain the return address to __libc_csu_init after main is initialised?

I wrote a simple program in C, compiled it, opened it in gdb, set a breakpoint at line 11 and inspected the stack. 1 #include<stdio.h> 2 3 int main(int argc, char *argv[]){ 4 char ...
1
vote
1answer
73 views

is it possible to craft exploits for non-open source C/C++ software without fuzzing?

imagine that if i wanted to find a vulnerability in a program that is used by a lot of people in order to exploit it. the program is open source and is written in C/C++ . would this even be possible ...
1
vote
1answer
179 views

Reverse Engineering Unable to identify String encryption [closed]

I'm on an ethical hacking challenge. Which I asked here before. But I need a hint on solving this puzzle. Note: I do not need the problem resolved, just a hint. URI=...
29
votes
4answers
8k views

I feel like it's impossible to learn reverse engineering [closed]

I know how to use most of the tools in Kali like msfvenom and msfconsole and I can safely call myself a script kiddie. I learned the basics of C# and that helps me understand some of the things in C, ...
2
votes
2answers
363 views

Overflowing the buffer yet not jumping to address

I am a beginner at buffer overflows been studying this subject from a few days and i found this exercise (code from: here) I think understand the basic concept i write more than 64 bytes characters ...
4
votes
3answers
865 views

What assembly should I learn? [closed]

I want to learn assembly, but I am not sure what instruction set (if that is correct term?) I should learn? I have prior experience in programming, and I did a degree in Computer Science but ...
1
vote
2answers
387 views

How to analyze malware to find out where keylogger sent data?

Recently my antivirus detected some keyloggers that infected my network. I have those malware files and I want to analyze them. How can I do this analysis? It is important to find out details like ...
3
votes
1answer
365 views

How do security experts benefit from reverse-engineering?

How can reverse engineering (RE) help a security expert? I've participated in CTF challenges and I have seen RE as an important part of CTFs. Can anyone explain or show me a real scenario that shows ...
1
vote
0answers
286 views

Help with breaking SSL pinning of this app [closed]

I need help removing SSL pinning of this original Android app. I've tried different techniques like hooking the app with Objection, re-pinning with Frida, using the SSLUnpinning app from the Xposed ...
1
vote
2answers
287 views

My ISP blocks incoming ports so I can't even run webserver let alone 'reverse shell', any ideas? [closed]

I'm looking for ideas on how to run lab environment from "victim" test PC at work and "attacker" - my home PC. Both are on separate ISPs, but it seems that my ISP at home blocks anyone trying to ...
1
vote
0answers
225 views

Security of SQRC QR codes

I'm currently testing an application which uses QR codes to identify products. Now if I scan the QR code with any reader and generate a new QR code with the read text, it differs from the original QR ...
18
votes
1answer
812 views

Skype opens base64-encoded JavaScript. What does it do?

I just came across a rather unusual problem, and I cannot figure out if it actually is a problem (or even security issue) or not. Upon opening Skype on MacOS, a popup window appears (multiple times, ...
2
votes
1answer
788 views

Does Java anti-decompiler software really work as claimed?

BIS Guard's Java Antidecompiler is an application that you can purchase that claims: Java Antidecompiler protects java byte-code against decompilers, any binary viewers/editors, prevents reverse ...
1
vote
1answer
1k views

How to edit a Hex code without corrupting the file [in bypassing av]?

I recently started studying on bypassing AV by finding a AV signature on "nc.exe (NetCat)" and changing it to see how it works. I have already found the place of signature with splitting method then i ...
0
votes
1answer
67 views

Reverse a key diversification algorithm

What are the possible ways of reversing a key diversification algorithm? This is used to generate a different key for each user. I know the operands involved (three 4 bytes values) and the result (...
-3
votes
1answer
282 views

x86 vs x64 exploitation [closed]

A lot of the texts I’ve looked at seems to be based on 32 bit processors. How different is reversing 32 bit and 64 bit? Is it easy to pick up the 64 bit stuff if I learn the 32 bit stuff?
1
vote
1answer
128 views

How does malware connect to FTP servers without revealing credentials to the victim?

Let’s take an FTP based passwords stealer, or some keylogger, that uploads the details of our victims to our FTP server. How do they connect back to our FTP server? As far as I know that for ...
5
votes
2answers
1k views

Preventing users from bypassing root/jailbreak detection measures

A pentest was made to our mobile app (Android and iOS version) and we received feedback stating that jailbreak/root detection was ineffective because it was relatively easy to reverse engineer the ...
12
votes
2answers
1k views

Malware sandbox detection

I started some reverse engineering exercises using Ollydbg, IDA Pro and other tools like Sysinternals suite, etc. Some of these exercises are about malware. I downloaded some different malware from ...
3
votes
1answer
121 views

Printer Driver Threats

In an environment where users connect their devices to printers through USB, the device will be prompted to install its driver if it's the first time. As far as I'm aware for OSX, the drivers are ...
1
vote
1answer
60 views

Can an unloaded malicous.dll placed on the “drive by download ” directory be remotly exploited?

Some programs can be downloaded to the drive-by download directory through the browser , the easy way is to unpack the program on the /download directory (It is the default path if the user doesn't ...
1
vote
1answer
1k views

Is there some way to protect apk file from being decompiled?

I'd like to know if there's something to help with that that isn't over complicated as I'd like to protect an Android application against that at least a bit. I'd like to make clear that I'm talking ...
1
vote
0answers
75 views

Become master in two different infosec fields [closed]

I need career advice. I'm deeply,insanely interested in two fields of cyber security: Malware Analysis Web/System/Network Penetration Testing I have lots of learning resources about pentesting and ...
3
votes
1answer
838 views

How find the hash creation method knowing password, salt, and resulting hash?

If I know the password, the salt (supposed salt actually) and the output hash (sha1 format). How can I find the hash creation method ? I tried basic stuff like sha1(salt+password) sha1(...
1
vote
0answers
547 views

Bypassing Certificate/SSL Pinning using AppMon

I'm trying to reverse engineer an app that has Native layer certificate pinning, I can't go that deep in to patching so I've been looking in to other available options, one i came accross was appmon, ...
0
votes
2answers
169 views

Legality of sniffing own traffic between mobile app and server

Recently I found a bug on a mobile app which claims to protect their users' privacy, however after connecting my phone with burp and installing a certificate I noticed that this app was sending a ...
0
votes
3answers
3k views

Android app man-in-the-middle attack

Let's suppose I have an Android app that after strong authentication pulls sensitive data from server A and sends it to server B without storing it. The data appears only in the network traffic (...
3
votes
2answers
201 views

Why does some malware limit their scope to certain countries?

I've noticed that some reports on malware mention that a certain malware or exploit kit (RIG TK, step 2 for example), limit their scope to certain countries or actively avoid infecting other countries ...
0
votes
2answers
171 views

How to create a format that is very difficult to reverse engineer? [closed]

I am learning about file formats. I have an application that will do analytics and will have some personal information. I need to make it such that only some people are able to access data and even ...
0
votes
3answers
295 views

Find algorithm from Digest and Plaintext

I want to edit a connection string in a config file containing what seems to be a hashed password. I know the followings: -oldPwd in current configured file -oldHash in current configured file -...
5
votes
1answer
370 views

What makes malware like Stuxnet or Duqu so advanced?

While malware such as Stuxnet and Duqu have been known for at least six years now, they are still (to the best of my knowledge) considered to be the most advanced malware ever publicly known. My ...
0
votes
1answer
2k views

How to decode hex code and modify it? Binascii.unhexlify [closed]

I am reviewing the code hosted at edb and the portion I am trying to make sense of and modify is at line 78 reversetcp_shellcode = binascii.unhexlify(b'...
2
votes
2answers
331 views

I just received a phishing text message, how could this have worked?

I received a phishing text message that pretended to be my bank. It had a link that went to a site that redirect to the following script: <html><script language="javascript">var page = "...
5
votes
1answer
2k views

How to reverse engineer WannaCry? [closed]

I was reading an article today about a Google researcher linking the WannaCry malware to the earlier malware Cantopee. I had two primary questions based on the contents of the article. What do the ...
0
votes
1answer
313 views

Secure compiled .NET source code applications ASP.NET and Windows Forms [closed]

Right now I'm working as a software development leader in my enterprise. Here's the main issue of everything. A software developer that works with us. There has been some rumours about this user ...