Reverse Engineering

When to Activate

• Analyzing compiled binaries for vulnerabilities
• Understanding proprietary protocols or file formats
• Malware analysis and unpacking
• Firmware extraction and analysis
• Bypassing anti-debugging/anti-tampering protections
• CTF binary challenges
• Patch diffing to find 1-day vulnerabilities

Static Analysis

Initial Triage

# File identification
file target_binary
rabin2 -I target_binary  # binary info (arch, bits, endian, protections)