wtsxDev/reverse-engineering

Reverse Engineering resources

A curated list of awesome reversing resources

• Awesome Reversing
  • Books
  • Courses
  • Practice
  • Hex Editors
  • Binary Format
  • Disassemblers
  • Binary Analysis
  • Bytecode Analysis
  • Import Reconstruction
  • Dynamic Analysis
  • Debugging
  • Mac Decrypt
  • Document Analysis
  • Scripting
  • Android
  • Yara

---

Books

Reverse Engineering Books

• The IDA Pro Book
• Radare2 Book
• Reverse Engineering for Beginners
• The Art of Assembly Language
• Practical Reverse Engineering
• Reversing: Secrets of Reverse Engineering
• Practical Malware Analysis
• Malware Analyst's Cookbook
• Gray Hat Hacking
• Access Denied
• The Art of Memory Forensics
• Hacking: The Art of Exploitation
• Fuzzing for Software Security
• Art of Software Security Assessment
• The Antivirus Hacker's Handbook
• The Rootkit Arsenal
• Windows Internals Part 1 Part 2
• Inside Windows Debugging
• iOS Reverse Engineering

Courses

Reverse Engineering Courses

• Lenas Reversing for Newbies
• Open Security Training
• Dr. Fu's Malware Analysis
• Binary Auditing Course
• TiGa's Video Tutorials
• Legend of Random
• Modern Binary Exploitation
• RPISEC Malware Course
• SANS FOR 610 GREM
• REcon Training
• Blackhat Training
• Offensive Security
• Corelan Training
• Offensive and Defensive Android Reversing

Practice

Practice Reverse Engineering. Be careful with malware.

• Crackmes.de
• OSX Crackmes
• ESET Challenges
• Flare-on Challenges
• Github CTF Archives
• Reverse Engineering Challenges
• xorpd Advanced Assembly Exercises
• Virusshare.com
• Contagio
• Malware-Traffic-Analysis
• Malshare
• Malware Blacklist
• malwr.com
• vxvault

Hex Editors

Hex Editors

• HxD
• 010 Editor
• Hex Workshop
• HexFiend
• Hiew
• hecate

Binary Format

Binary Format Tools

• CFF Explorer
• Cerbero Profiler // Lite PE Insider
• Detect It Easy
• PeStudio
• PEiD
• MachoView
• nm - View Symbols
• file - File information
• codesign - Code signing information usage: codesign -dvvv filename

Disassemblers

Disassemblers

• IDA Pro
• GHIDRA
• Binary Ninja
• Radare
• Hopper
• Capstone
• objdump
• fREedom

Binary Analysis

Binary Analysis Resources

• Mobius Resources
• z3
• bap
• angr

Bytecode Analysis

Bytecode Analysis Tools

• dnSpy
• Bytecode Viewer
• Bytecode Visualizer
• JPEXS Flash Decompiler

Import Reconstruction

Import Reconstruction Tools

• ImpRec
• Scylla
• LordPE

Dynamic Analysis

Dynamic Analysis Tools

• ProcessHacker
• Process Explorer
• Process Monitor
• Autoruns
• Noriben
• API Monitor
• iNetSim
• SmartSniff
• TCPView
• Wireshark
• Fakenet
• Volatility
• Dumpit
• LiME
• Cuckoo
• Objective-See Utilities
• XCode Instruments - XCode Instruments for Monitoring Files and Processes User Guide
• dtrace - sudo dtruss = strace dtrace recipes
• fs_usage - report system calls and page faults related to filesystem activity in real-time. File I/O: fs_usage -w -f filesystem
• dmesg - display the system message buffer

Debugging

Debugging Tools

• WinDbg
• OllyDbg v1.10
• OllyDbg v2.01
• OllySnD
• Olly Shadow
• Olly CiMs
• Olly UST_2bg
• x64dbg
• gdb
• vdb
• lldb
• qira
• unicorn

Mac Decrypt

Mac Decrypting Tools

• Cerbero Profiler - Select all -> Copy to new file
• AppEncryptor - Tool for decrypting
• Class-Dump - use deprotect option
• readmem - OS X Reverser's process dumping tool

Document Analysis

Document Analysis Tools

• Ole Tools
• Didier's PDF Tools
• Origami

Scripting

Scripting

• IDA Python Src
• IDC Functions Doc
• Using IDAPython to Make your Life Easier
• Introduction to IDA Python
• The Beginner's Guide to IDA Python
• IDA Plugin Contest
• onehawt IDA Plugin List
• pefile Python Library

Android

Android tools

• Android Studio
• APKtool
• dex2jar
• Bytecode Viewer
• IDA Pro
• JaDx

Yara

Yara Resources

• Yara docs
• Cheatsheet
• yarGen
• Yara First Presentation

Please have a look at

• Top Hacking Books
• Top Reverse Engineering Books
• Top Machine learning Books
• Top 5 books Programming Books
• Top Java Books