Reverse Engineering – Telegram
Reverse Engineering
@reverseengineeringx
4.75K subscribers
106 photos
1 video
18 files
458 links
Everything is open-source.

The official community group: @reverseengineeringz
Download Telegram
About
Blog
Apps
Platform
Join
Reverse Engineering
4.75K subscribers
Reverse Engineering
PDB downloader downloads specific symbol files only for the libraries you want

https://blogs.msdn.microsoft.com/webtopics/2016/03/07/pdb-downloader/

https://github.com/rajkumar-rangaraj/PDB-Downloader/releases/download/v1.0/PDBDownloader.exe
656 viewsRebellion, 
Reverse Engineering
https://youtu.be/lwhMThePdIo
YouTube
The new Windows subsystem for Linux architecture: a deep dive - BRK3068
The WSL community has given amazing feedback on how we can improve through platforms like Twitter, Github, and UserVoice. Our team has taken that feedback to heart. In this session, they’ll be showing off how the new WSL architecture will improve your development…
646 viewsRebellion, 
Reverse Engineering
https://docs.microsoft.com/en-us/windows/wsl/install-manual#downloading-distros-via-the-command-line
Docs
Manual installation steps for older versions of WSL
Step by step instructions to manually install WSL on older versions of Windows, rather than using the wsl install command.
667 viewsRebellion, 
Reverse Engineering
https://github.com/Yara-Rules/rules
GitHub
GitHub - Yara-Rules/rules: Repository of yara rules
Repository of yara rules. Contribute to Yara-Rules/rules development by creating an account on GitHub.
688 viewsRebellion, 
Reverse Engineering
https://github.com/polymorf/findcrypt-yara
https://github.com/hy00un/Hyara
https://github.com/OALabs/FindYara
GitHub
GitHub - polymorf/findcrypt-yara: IDA pro plugin to find crypto constants (and more)
IDA pro plugin to find crypto constants (and more) - polymorf/findcrypt-yara
732 viewsRebellion, 
Reverse Engineering
https://youtu.be/KWgeHF2Egk0
YouTube
Jpeg hiding an EXE sample from subscriber
Sample image emailed to me, contains a virus.

Subscribe now https://goo.gl/EG1EPH


https://www.virustotal.com/gui/file/aa1b3c239bea4078de07da3e0ca733ad7c1a85f4e168eb6e542f1d8ebb24b30b/detection

https://www.hybrid-analysis.com/sample/04b7558107366afc25…
707 viewsRebellion, 
Reverse Engineering
Screenshot_2019_05_12_14_09_08_507_com.png
368.7 KB
796 viewsRebellion, 
Reverse Engineering
The Java Native Interface (JNI) is a foreign function interface programming framework that enables Java code running in a Java virtual machine (JVM) to call and be called by[1] native applications (programs specific to a hardware and operating system platform) and libraries written in other languages such as C, C++ and assembly.

https://en.wikipedia.org/wiki/Java_Native_Interface

https://www3.ntu.edu.sg/home/ehchua/programming/java/JavaNativeInterface.html

https://docs.oracle.com/javase/7/docs/technotes/guides/jni/spec/types.html

https://docs.oracle.com/javase/7/docs/technotes/guides/jni/spec/functions.html
734 views
Reverse Engineering
image_2019-05-13_02-04-16.png
124.2 KB
Get the JNI Function name from function offset

https://github.com/rebe11ion/Mytools/blob/master/getJNIFunt.py
861 views
Reverse Engineering
https://en.wikipedia.org/wiki/XTEA
785 views
Reverse Engineering
http://www.hexblog.com/
787 views
Reverse Engineering
https://www.youtube.com/playlist?list=PL0oekSefhQVJdk0hSRu6sZ2teWM740NtL
YouTube
The Hardware/Software Interface Class by Luis Ceze and Gaetano Borriello
This is the complete set of videos from the Hardware/Software Interface class that I had the pleasure of teaching with Gaetano Borriello. Hope you enjoy it a...
866 views
Reverse Engineering
https://youtu.be/At_T6riSb9A
YouTube
Ghidra: Android APK (it's basically dex2jar with a .dex decompiler)
Ghidra's APK analysis capabilities are basically dex2jar. However, the .dex and .class bytecode decompilers are a nice touch that could come in handy if jd-gui can't (fully / correctly) decompile an APK.
938 views
Reverse Engineering
https://cpulator.01xz.net
cpulator.01xz.net
CPUlator Computer System Simulator
CPUlator is a full-system Nios II, ARMv7, RISC-V RV32, and SPIM-compatible MIPS simulator that runs in a web browser. It is designed for education use to teach computer organization and assembly-language programming. The computer simulation includes I/O devices…
891 views
Reverse Engineering
https://azeria-labs.com/
828 views
Reverse Engineering
https://security.stackexchange.com/questions/200571/decrypting-ssl-traffic-using-fiddler-to-see-requests-being-sent-by-malware-writt
Information Security Stack Exchange
Decrypting SSL traffic using Fiddler to see requests being sent by malware written in .NET
I tried to find the GET data of some malware but it appears that this malware is encrypting traffic using SSL.

When I tried to decrypt the SSL data via Fiddler, I always get nothing — only informa...
873 views
Reverse Engineering
https://www.google.com/amp/s/blog.attify.com/getting-started-with-firmware-emulation/amp/
Attify Blog - IoT Security, Pentesting and Exploitation
Getting started with Firmware Emulation for IoT Devices
Learn how to emulate firmware meant for different architectures to be able to exploit them better.
831 views
Reverse Engineering
uEMU Tiny cute emulator plugin for IDA based on unicorn.
https://github.com/alexhude/uEmu
811 views
Reverse Engineering
IDAtropy is a plugin for Hex-Ray's IDA Pro designed to generate charts of entropy and histograms using the power of idapython and matplotlib.
https://github.com/danigargu/IDAtropy
854 views
Reverse Engineering
Murph Firmware Analysis Tool: https://github.com/rebe11ion/Murph
819 views
Reverse Engineering
Ret-sync now supports Ghidra (syncing with popular debuggers)

https://github.com/bootleg/ret-sync
GitHub
GitHub - bootleg/ret-sync: ret-sync is a set of plugins that helps to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg2/x64dbg)…
ret-sync is a set of plugins that helps to synchronize a debugging session (WinDbg/GDB/LLDB/OllyDbg2/x64dbg) with IDA/Ghidra/Binary Ninja disassemblers. - bootleg/ret-sync
808 views