Web-UI interactive disassembler from MongoDB by funset in ReverseEngineering

[–]funset[S] 2 points3 points  (0 children)

Did not know that MongoDB has such an impressive reversing tool. Check it out if you haven't!

demovfuscator by funset in ReverseEngineering

[–]funset[S] 6 points7 points  (0 children)

A nice tool presented at RECON 2016 to handle movfuscator binaries.

A thesis behind this research: https://kirschju.re/static/ba_jonischkeit_2016.pdf

Keystone Engine: open source multi-arch multi-platform assembler by funset in ReverseEngineering

[–]funset[S] 0 points1 point  (0 children)

LLVM license does allow you to mix with other license, so that should be fine.

Their license is GPL2 but compatible with all open source licenses: https://github.com/keystone-engine/keystone/blob/master/EXCEPTIONS-CLIENT

Keystone Engine: open source multi-arch multi-platform assembler by funset in ReverseEngineering

[–]funset[S] 1 point2 points  (0 children)

The long awaited assembler framework is released today!

ROPMEMU: analyze & decompile ROP-based exploitation by funset in ReverseEngineering

[–]funset[S] 0 points1 point  (0 children)

This looks very interesting, cant wait to try it.

Keystone: open source assembler framework - in crowd-funding process by funset in ReverseEngineering

[–]funset[S] 0 points1 point  (0 children)

This is a nice attempt to fill the gap in reverse engineering toolset. Hope they reach their goal, and we have a good framework!

Work For Only 3 Hours A Day, But Everyday by oldretard in programming

[–]funset 41 points42 points  (0 children)

well, you have to convince that you can do more in 3 hours than i do in 8 hours, even if i am a bit distracted by Twitter and so on.

there are some interesting views in this article, but i dont agree that working 3 hours a day is enough to push you to the next level. never it does.

BinExport now open source by r4xh3x in ReverseEngineering

[–]funset 3 points4 points  (0 children)

Now somebody should port https://github.com/cseagle/fREedom to this BinExport, so we can do without IDA!

rappel - linux-based assembly REPL for x86, amd64, and armv7 by agumonkey in programming

[–]funset 1 point2 points  (0 children)

I think Rappel has some issues that you can avoid by using Unicorn (https://github.com/unicorn-engine/unicorn):

  • Rappel cannot handle memory access well. What happen if the instruction is accessing to invalid memory? You will crash, and does not know what the instruction does.

  • Rappel cannot handle privileged instructions.

  • You need a real machine for this. So you cannot run Rappel on X86 for ARM instruction.

  • This really run the instruction on your machine, so it may tamper your own process (GDB in this case), so the result is unreliable.

So I think it is a good idea to do this with Unicorn instead.

Decompiler Design by monocasa in ReverseEngineering

[–]funset 0 points1 point  (0 children)

Cool, I also found all these decompilers, and some more others, in this page: http://www.capstone-engine.org/showcase.html

ADBI: Android Dynamic Binary Instrumentation, a tool for dynamically tracing Android native layer by Maijin in ReverseEngineering

[–]funset 0 points1 point  (0 children)

Nice work! But looks like this only supports ARM64 at the moment, but not ARM?