Questions tagged [reverse-engineering]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
0 answers
34 views

why some android elf file has interpreter path?

I am learning the elf file format for Android, but I have found that some elf files can specify the loader through the interpreter path in the program header. However, the elf test file I wrote myself ...
金坷垃金银花茶's user avatar
0 votes
1 answer
23 views

Help with Analyzing NFS Architecture in a Cluster Sharing a Home Directory Across Two Servers"

I Am very confused because I am trying to understand the architecture without documentation,we have a NFS architecture of a cluster of PCs that share the same home directory ( Server1 is a Pc of a ...
Matteo S.'s user avatar
1 vote
0 answers
34 views

DVD recorder based on freebsd, how to edit service disc

I am trying to understand what is written here and how it can be done. Maybe someone will be able to help and understand this: https://forum.videohelp.com/threads/306345-some-problem-with-DVR560H-s-...
jasko887's user avatar
1 vote
1 answer
262 views

How to dump network requests receive and send?

I want to learn reverse app, I'm confused how to dump network of an app, I tried tcpflow, ngrep, etc. it works but the output data is not human readable, can you give me a linux command to get network ...
noobdev's user avatar
  • 33
1 vote
1 answer
176 views

Reverse engineer PCI drivers for device with none

Is it possible to reverse engineer PCI drivers for a device which has none? The device in question was a PCI ESCON card that allowed you to connect a mainframe ESCON channel to a specialty unix ...
Enzo Damato's user avatar
0 votes
1 answer
1k views

Emulating an AARCH64 Binary calling libgps on x86_64 Ubuntu using QEMU gives "Error relocating: symbol not found" Errors

This is similar to the issue posted here and here. I want to reverse engineer a binary called gpslogger but before debugging it using GDB, I wish to simply emulate it using QEMU (qemu-aarch64) since ...
Newbie's user avatar
  • 135
0 votes
0 answers
243 views

Dumping a packed shared library

I have 2 packed shared libraries, the second one is probably dependent on first one. The first one is packed with UPX, and the unpacking code is in .init_proc. I have tried attaching a debugger and ...
Mikel Frejie's user avatar
0 votes
1 answer
348 views

Tomcat Ghostcat exploitable through apache webserver reverse proxy?

I would like to know if the ghostcat bug can be exploited through an Apache web server reverse proxy setup. This is our web server config. <VirtualHost *:80> ServerName 192.168.178.1 ...
elements518's user avatar
2 votes
0 answers
1k views

Recover static library from executable

I have an existing executable for which a small amount of source code has been lost. In particular, the executable uses a few functions from a static library, and the source code for that library is ...
maldata's user avatar
  • 145
1 vote
0 answers
48 views

Arbitrary "files" in /proc/? [duplicate]

Is there a way to create files in /proc/ without actually writing a kernel module? This is for reverse engineering purposes, an app expects certain things in /proc/ and I do not want to write a ...
lukash's user avatar
  • 111
2 votes
1 answer
96 views

What the branch machine op-code means (X86 architecture)?

I have a simple c code which is compiled and then the text code extracted using objdump utility. here is the dump file (A piece of dumped file): 0804841b <main>: 804841b: 8d 4c 24 04 ...
husin alhaj ahmade's user avatar
-2 votes
2 answers
736 views

Reverse engineering the hex file [closed]

reverse engineering the hex file Written in c language From atmega16 Want source code from the hex code By reverse engineering need to extract the library file of the code is their any possible ...
user8708050's user avatar
6 votes
2 answers
2k views

I need to modify a script but it's full of gibberish

I need to modify a script which is part of a programme I downloaded. However, when I try to view the script with vim, it is full of symbols, numbers and letters placed randomly. Is there anything I ...
Chantelle Dimech's user avatar
2 votes
4 answers
2k views

Reverse engineering IP camera firmware to find admin password

I'm trying to reverse engineering an IP camera firmware and found the complete ROM OS but I would like to find out the system password so I have looked at /etc/passwd. The file is not there, it is ...
TurtleForGaming Apps's user avatar
3 votes
3 answers
1k views

Find the right device to reverse-engineer

I have an Asus GL503VD for which the touchpad doesn't work on linux. I tried many different distros: Arch, Debian, Ubuntu 16/17/18, Sabayon, Pop_OS, Fedora. None of them made the touchpad work so I ...
TaiTair's user avatar
  • 33
108 votes
5 answers
27k views

Why are true and false so large?

After finding out that several common commands (such as read) are actually Bash builtins (and when running them at the prompt I'm actually running a two-line shell script which just forwards to the ...
Kidburla's user avatar
  • 1,276
3 votes
1 answer
2k views

strange Linux binary

I have an executable file that is not lending itself for disassembling or decompiling well as usual/expected. file and ldd are giving an output different than the usual: $ file exe_file exe_file: ...
Rui F Ribeiro's user avatar
67 votes
1 answer
36k views

Understanding what a Linux binary is doing

I recently had a task at work to understand a binary Linux program. However, the program was in binary form. I used the commands file, strings, and objdump to have a slight idea of what it was doing, ...
user avatar
5 votes
2 answers
3k views

How do I hide TracerPID from a process?

I'm conjecturing SQL Server on Linux is checking /proc/self/status for TracerPID and then dying if it's not 0. I want to test that. Playing around, here is the strace, ... lots of stuff openat(...
Evan Carroll's user avatar
  • 30.4k
1 vote
2 answers
2k views

How to forward USB HID traffic to a VirtualBox virtual machine?

As one is able to easily forward the USB HID signals from the keyboard to the virtual machine I'd be surprised if this wasn't possible. Do I need a "KVM" (Kernel-based Virtual Machine) for this to ...
mYnDstrEAm's user avatar
  • 4,215
1 vote
1 answer
1k views

Save U-Boot environment variables without Flash connected

I've seen multiple blog posts of people getting around the U-Boot bootdelay 0 environment variable to get to the U-Boot CLI. An example is here. The general process, as I understand it, is: Desolder/...
c0mpute's user avatar
  • 11
6 votes
2 answers
51k views

How objdump disassemble elf binary

I have a quick question. I have generated a ELF binary from a c code using following code: gcc -o simple simple.c Then I do objdump for that ELF binary: objdump --disassemble-all simple I have ...
Mustakimur Khandaker's user avatar
47 votes
2 answers
92k views

Is it possible to get the information for a device tree using /sys of a running kernel?

Commonly for arm systems, device trees supply hardware information to the kernel (Linux). These device trees exist as dts (device tree source) files that are compiled and loaded to the kernel. Problem ...
humanityANDpeace's user avatar
21 votes
3 answers
143k views

convert executable back to C source code

Unfortunately I lost my source code and I just have the output file that made with gcc in linux and I don’t have any access to my pc now.is there any way to convert output file to source file (in c ...
mahsa's user avatar
  • 211
4 votes
2 answers
461 views

Speak directly to a PCI device without a driver?

I have a friend who has a PCI device that has no driver. Is there a command that will allow me to speak to this device without a driver? (we are trying to reverse engineer its protocols.) I will ...
MrSynAckSter's user avatar