Questions tagged [reverse-engineering]

Reverse engineering is the process of discovering the technological principles of a human made device, object or system through analysis of its structure, function and operation.

27 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
3
votes
0answers
129 views

Is there an easy way to dissect .NET Remoting traffic for reverse engineering?

I'm working on a vulnerability within an application that uses .NET Remoting. I can see from the code that there are a number of potential ways to get RCE, but due to how the application performs its ...
2
votes
0answers
28 views

How to Get full PLT Entry of a function and not the offset?

I am trying to leak libc's base address by first leaking the address of gets(). However, using Pwntools to get the PLT and GOT (and pretty much anything) entries only gives me their offsets as ...
2
votes
0answers
86 views

Problem when disassembling 16-bit binary one instruction at the time

I am currently disassembling a binary that enters vm86 mode, so 32-bit binary in 16-bit mode. While IDA fails to do that correctly, I took the initiative to do it by myself. Problem is, I very often ...
1
vote
1answer
101 views

Are emulators isolated from the host for malware testing?

I know that virtualization is different from emulation; I was wondering if emulation is isolated from its host and any destruction on it will not affect the host as if it were a virtual machine. I ...
1
vote
3answers
1k views

Intercept HTTP Traffic of an android app?

I was trying to test and intercept traffic from an app developed on Rhodes open source framework, I setup a proxy with burp, and of course I have installed burp certificate on my device hence I can ...
1
vote
0answers
106 views

How to analyze a USB device of having possibly malicious capabilities?

So I recently ordered a chinese external USB card and I would like to find out whether it has some hidden functionality, which might become malicious. It has buttons integrated in it so Linux using ...
1
vote
0answers
153 views

Passively read key from process memory without invoking kernel (windows 10)

I have a process that loads into memory like any other process. It contains a special key. Our goal is to read this key inside memory...or while it is in transit across the data bus from cpu. The ...
1
vote
0answers
73 views

puts(address of stack) does not print the string pointed by the address

I am trying to do ROP using gadget chaining technique on a 64-bit machine. This is the source code: #include<stdio.h> int main(){ char * str = "Hello World!"; char buf[4]; puts(str)...
1
vote
0answers
153 views

Is there a way to refuse Process Hooking on JailBreak IOS devices

I want to find a way to prevent apps from Cycript attaching. So Far I Know Cycript works as below, but I can not find a way to stop Cycript. One method to stop injection is to add "-Wl,-sectcreate,...
1
vote
0answers
95 views

Is there a way to refuse Process Hooking on jailbroken iOS devices

I want to find a way to prevent apps from Cycript attaching. So far I know Cycript works as below, but I can not find a way to stop Cycript. One method to stop injection is to add -Wl,-sectcreate,...
1
vote
0answers
116 views

Limited ESP Length in Buffer Overflow Sample C Program

May I know how to increase the length of ESP on a sample c program which allows me to execute shellcode on the stack. However, as of now, the sample c program only has an ESP length of 61 thus ...
1
vote
0answers
354 views

Capturing HTTP Traffic Through Proxy Sever

While performing the security assessment on an Android application(UAT Environment), I'm unable to capture the HTTP traffic through proxy server(Burp Suite/OWASP Zap). There is no point of ...
1
vote
0answers
465 views

Security of SQRC QR codes

I'm currently testing an application which uses QR codes to identify products. Now if I scan the QR code with any reader and generate a new QR code with the read text, it differs from the original QR ...
1
vote
0answers
672 views

Bypassing Certificate/SSL Pinning using AppMon

I'm trying to reverse engineer an app that has Native layer certificate pinning, I can't go that deep in to patching so I've been looking in to other available options, one i came accross was appmon, ...
1
vote
0answers
117 views

Implications of FirebaseAuth credentials in an Android .apk

I'm currently looking at an .apk for Android and I came across some hard-coded credentials. Apparently these are used for something called FireBaseAuth, which seems to be a Google service. I'm not ...
1
vote
0answers
460 views

Mitigating Memory Dump and Analyze of an Application

I have used Frida and Fridump for Memory Dump & Strings Dump on a mobile device which I installed an app for testing. In the strings.txt file I have extracted using the mentioned above tools, I'm ...
1
vote
0answers
121 views

Volatility Plug-ins to investigate packed exe files

I am using volatility for malware analysis. I have got a process in my memory image that is packed by malware using UPX packer. Malfind plugin doesn't show injected code for it also. How can i use ...
1
vote
1answer
119 views

Polymorphic Analysis

I'm a beginner at malware analysis. For my research studies, I have to identify polymorphic malware based from experiments. I would like to know if there are any guides showing how to analyze the code ...
1
vote
0answers
411 views

National ID analysis and generator?

A National ID in my country consists of 14 digits: CYYMMDDXXZZZZ1C1 Where: C refers to the century - 2 for those born between 1900 and 1999, 3 for those born between 2000 to 2099 YYMMDD - birth ...
1
vote
0answers
2k views

Google Chrome Crash Report Analysis

I am new to the field of crash analysis. I recently, by accident, happened to crash Google Chrome. I do not know the reason as to why the crash really happened. I'd like to know it in depth though. ...
0
votes
0answers
86 views

Repackaging Mobile app which resists repackaging

I tried repackaging an Android app but after installation, when I launch that app, the app crashes immediately. This is the exception I am getting when I decompile this application using apktool and ...
0
votes
0answers
134 views

Bypass ASLR in buffer overflow

Iam new in buffer overflow and i have some questions : Is all dll files in windows are loaded at memory or some of them only , If some of them , Who tell windows to load this and leave this How an ....
0
votes
0answers
42 views

Mnemonic Seed Phrase Generation For Private Key Truncation

The below code block is capable of generating a mnemonic seed phrase. If I want to generate a mnemonic seed for a private key, is it then correctly understood that I should input the private key as ...
0
votes
1answer
216 views

Overwrite return address in C

It's about a CTF Challenge. I'm trying to execute a buffer overflow attack on a C program. The code is : #include<stdio.h> #include<string.h> #include<stdlib.h> #include <sys/...
0
votes
0answers
166 views

John the Ripper Obtain Password from Hash

John the Ripper 1. Ran ./pdf2john.pl /home/desktop/1.pdf > /home/desktop/1.txt (Hash inside 1.txt) 2. Ran ./john /home/desktop/1.txt Output: Loaded 1 password hash (PDF [MD5 SHA2 RC4/AES 32/64]) No ...
0
votes
0answers
80 views

How to decrypt a rocksdb file from Android?

I have collected an encrypted RocksDB file from an Android application. By reverse engineering the mobile application I have also collected the encryption key. However, for the life of me I cannot ...
0
votes
0answers
107 views

Not able to work ret2text technique for 64 bit system

I am trying to call a dead function using buffer overflow. The binary is compiled on a 64-bit system with -fno-stack-protector and -no-pie. ASLR is turned off. Here is the code: #include<stdio.h&...