Check also IDEs like IntelliJ, Visual Studio, Eclipse, …
- gdb
- objdump
- Radare 2
- ltrace ./a.out
- General
- IDA (free)
- Ghidra
- Rename functions after guessing
- Search for interesting strings and go to occurrences to directly go to more interesting code. Don’t review the code from start until.…
- Try to guess which structures a variable could be and then try to redefine a function. For example, if you know that a variable seems to be an array, set the variable as such. The code gets much more easier to read.
- See also slides from the Incident Response March 2025 training.
- Java:
- Net
- Python (yes, you can create exe files from Python bytecode .pyc files…)
Leave a Reply
You must be logged in to post a comment.