RedSec
35 lessons

Reverse engineering

Static and dynamic analysis, file formats, strings, control flow, and patching basics.

  1. 001 Static analysis workflow Learn Static analysis workflow through a safe, repeatable reverse engineering workflow. intro tutorial 20 min
  2. 002 Strings and basic triage Learn Strings and basic triage through a safe, repeatable reverse engineering workflow. intro tutorial 20 min
  3. 003 File format identification Learn File format identification through a safe, repeatable reverse engineering workflow. intro tutorial 20 min
  4. 004 Control flow reading Learn Control flow reading through a safe, repeatable reverse engineering workflow. intro tutorial 20 min
  5. 005 Dynamic analysis in a sandbox Learn Dynamic analysis in a sandbox through a safe, repeatable reverse engineering workflow. intro tutorial 20 min
  6. 006 Debugger breakpoints Learn Debugger breakpoints through a safe, repeatable reverse engineering workflow. intro tutorial 20 min
  7. 007 Patching a toy binary Learn Patching a toy binary through a safe, repeatable reverse engineering workflow. intro reference 12 min
  8. 008 Recognizing packing indicators Learn Recognizing packing indicators through a safe, repeatable reverse engineering workflow. intro tutorial 20 min
  9. 009 Decompilers and assumptions Learn Decompilers and assumptions through a safe, repeatable reverse engineering workflow. core lab 30 min
  10. 010 Documenting reverse engineering notes Learn Documenting reverse engineering notes through a safe, repeatable reverse engineering workflow. core tutorial 20 min
  11. 011 ELF file anatomy Learn ELF file anatomy through a safe, repeatable reverse engineering workflow. core tutorial 20 min
  12. 012 PE file anatomy Learn PE file anatomy through a safe, repeatable reverse engineering workflow. core tutorial 20 min
  13. 013 Mach-O file anatomy Learn Mach-O file anatomy through a safe, repeatable reverse engineering workflow. core tutorial 20 min
  14. 014 Assembly registers basics Learn Assembly registers basics through a safe, repeatable reverse engineering workflow. core reference 12 min
  15. 015 x86 calling conventions Learn x86 calling conventions through a safe, repeatable reverse engineering workflow. core tutorial 20 min
  16. 016 x64 calling conventions Learn x64 calling conventions through a safe, repeatable reverse engineering workflow. core tutorial 20 min
  17. 017 ARM assembly orientation Learn ARM assembly orientation through a safe, repeatable reverse engineering workflow. core tutorial 20 min
  18. 018 Stack vs heap in disassembly Learn Stack vs heap in disassembly through a safe, repeatable reverse engineering workflow. core lab 30 min
  19. 019 Control flow graph reading Learn Control flow graph reading through a safe, repeatable reverse engineering workflow. core tutorial 20 min
  20. 020 Function prologue recognition Learn Function prologue recognition through a safe, repeatable reverse engineering workflow. core tutorial 20 min
  21. 021 String deobfuscation workflow Learn String deobfuscation workflow through a safe, repeatable reverse engineering workflow. core reference 12 min
  22. 022 XOR decode loops Learn XOR decode loops through a safe, repeatable reverse engineering workflow. core tutorial 20 min
  23. 023 Anti-debugging signals Learn Anti-debugging signals through a safe, repeatable reverse engineering workflow. core tutorial 20 min
  24. 024 Packed binary triage Learn Packed binary triage through a safe, repeatable reverse engineering workflow. core tutorial 20 min
  25. 025 Ghidra project workflow Learn Ghidra project workflow through a safe, repeatable reverse engineering workflow. core tutorial 20 min
  26. 026 IDA basics for CTFs Learn IDA basics for CTFs through a safe, repeatable reverse engineering workflow. advanced tutorial 35 min
  27. 027 radare2 orientation Learn radare2 orientation through a safe, repeatable reverse engineering workflow. advanced lab 45 min
  28. 028 ltrace and strace workflow Learn ltrace and strace workflow through a safe, repeatable reverse engineering workflow. advanced reference 12 min
  29. 029 Dynamic library loading Learn Dynamic library loading through a safe, repeatable reverse engineering workflow. advanced tutorial 35 min
  30. 030 Patch and compare workflow Learn Patch and compare workflow through a safe, repeatable reverse engineering workflow. advanced tutorial 35 min
  31. 031 License check bypass in toy binaries Learn License check bypass in toy binaries through a safe, repeatable reverse engineering workflow. advanced tutorial 35 min
  32. 032 Malware lab safety boundaries Learn Malware lab safety boundaries through a safe, repeatable reverse engineering workflow. advanced tutorial 35 min
  33. 033 Android APK reverse basics Learn Android APK reverse basics through a safe, repeatable reverse engineering workflow. advanced tutorial 35 min
  34. 034 Java bytecode review Learn Java bytecode review through a safe, repeatable reverse engineering workflow. advanced tutorial 35 min
  35. 035 WebAssembly reverse basics Learn WebAssembly reverse basics through a safe, repeatable reverse engineering workflow. advanced reference 12 min