Building a Compiler

https://www.youtube.com/playlist?list=PLRAdsfhKI4OWNOSfS7EUu5GRAVmze1t2y&feature=share

@reverseengine

Reverse Engineering WebAssembly

https://medium.com/%40pnfsoftware/reverse-engineering-webassembly-ed184a099931

@reverseengine

Time Trvel Triage: An Introduction to Time Travel Debugging using a .NET Process Hollowing

https://cloud.google.com/blog/topics/threat-intelligence/time-travel-debugging-using-net-process-hollowing?linkId=17730646

@reverseengine

UPX Unpacking: Manual Reverse Engineering

https://guidedhacking.com/threads/how-to-unpack-upx-using-x64dbg.20985

@reverseengine

Fully Undetectable Windows Shellcode Loader Now Available in IRIS C2

https://www.irisc2.com/blog/javelin-fud-loader

@reverseengine

Using EDR-Redir to Break EDR Via Bind Link and Cloud Filter

https://www.zerosalarium.com/2025/10/DR-Redir-Break-EDR-Via-BindLink-Cloud-Filter.html?m=1

@reverseengine

Process Hollowing on Windows 11 24H2

https://hshrzd.wordpress.com/2025/01/27/process-hollowing-on-windows-11-24h2

@reverseengine

C3

https://github.com/ReversecLabs/C3

@reverseengine

Epic

EPIC is a Toolkit for Developing and Building C-to-PIC Shell Code

https://github.com/Print3M/epic

@reverseengine

Google-Chrome-Zero-Day

https://github.com/Muhammednihalmp/Google-chrome-zero-day

@reverseengine

NTLMPasswordChanger

https://github.com/kfallahi/NTLMPasswordChanger.git

@reverseengine

Exploit Writting Tutorial From Basic To Intermediate

http://x9090.blogspot.com/2010/03/tutorial-exploit-writting-tutorial-from.html

@reverseengine

A Linux Toolkit for Reverse-Engineering and Analyzing Malware

https://remnux.org

@reverseengine

Reverse Engineering WhatsApp Encryption for Chat Manipulation


https://www.youtube.com/watch?v=N0Ne623fKWc

@reverseengine

Android App Reverse Engineering

https://youtu.be/BijZmutY0CQ

@reverseengine

Linux Hacking

https://cocomelonc.github.io/linux/2025/10/09/linux-hacking-7.html

@reverseengine

MacOS Hacking

https://cocomelonc.github.io/macos/2025/10/15/malware-mac-12.html

@reverseengine

Pointers, References and Dynamic Memory Allocation

https://www3.ntu.edu.sg/home/ehchua/programming/cpp/cp4_PointerReference.html

@reverseengine

Local Variables روی استک

وقتی تابع متغیر محلی داره کامپایلر اون رو روی استک میزاره

ساختار فریم استک کامل

بعد از اجرای prologue:

push rbp
mov rbp, rsp
sub rsp, X ; ایجاد فضا برای متغیرهای محلی

ساختار میشه:

[ rbp+16 ] آرگومان سوم
[ rbp+8 ] آدرس برگشت
[ rbp+0 ] RBP قبلی
[ rbp-8 ] متغیر محلی 1
[ rbp-16 ] متغیر محلی 2

مثال:

int foo(int x) {
int t = x + 3;
return t * 2;
}

اسمبلی:

foo:
push rbp
mov rbp, rsp
sub rsp, 16 ; فضای متغیر محلی

mov DWORD PTR [rbp-4], edi ; t = x
add DWORD PTR [rbp-4], 3 ; t = x + 3

mov eax, DWORD PTR [rbp-4]
add eax, eax ; eax = t * 2

leave
ret

نکات مهم:

متغیر t روی استک قرار میگیره آدرسش rbp-4

چون int هست سایز 4 بایت

eax خروجی تابع



Local Variables on the Stack

When a function has a local variable, the compiler pushes it onto the stack

Complete stack frame structure

After executing the prologue:

push rbp
mov rbp, rsp
sub rsp, X ; Create space for local variables

The structure becomes:

[ rbp+16 ] Third argument
[ rbp+8 ] Return address
[ rbp+0 ] Previous RBP
[ rbp-8 ] Local variable 1
[ rbp-16 ] Local variable 2

Example:

int foo(int x) {

int t = x + 3;

return t * 2;
}

Assembly:

foo:

push rbp
mov rbp, rsp
sub rsp, 16 ; Local variable space

mov DWORD PTR [rbp-4], edi ; t = x
add DWORD PTR [rbp-4], 3 ; t = x + 3

mov eax, DWORD PTR [rbp-4]

add eax, eax ; eax = t * 2

leave
ret

Important notes:

The variable t is placed on the stack, its address is rbp-4

Because it is an int, its size is 4 bytes

eax is the output of the function

@reverseengine