Reverse Engineering

This is a collection of tools you may like if you are interested in reverse engineering and/or malware analysis on x86 and x64 Windows systems. https://github.com/mentebinaria/retoolkit

Analysis of Virtualization-based Obfuscation (r2con2021workshop) https://youtu.be/b6udPT79itk

Reverse Engineering/Game Patching Tutorial: Full Res Roller Coaster Tycoon with Ghidra+x64dbg+Python https://www.youtube.com/watch?v=cwBoUuy4nGc&t=13s&ab_channel=jeFF0Falltrades

Automating binary vulnerability discovery with Ghidra and Semgrep https://security.humanativaspa.it/automating-binary-vulnerability-discovery-with-ghidra-and-semgrep/

Malwoverview is a first response tool used for downloading and screening malware samples, suspicious URLs, IP address, domains. Malwoverview offers threat hunting information from Virus Total, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia, ThreatCrowd, Valhalla and it is able to scan Android devices against VT and HA. https://github.com/alexandreborges/malwoverview

ReversingHero https://www.reversinghero.com/

A quality write-up by hasherezade about challenge 9 of FlareOn7: https://hshrzd.wordpress.com/2020/12/12/flareon-7-task-9/

Anti-virus Artifacts II is out! https://github.com/D3VI5H4/Antivirus-Artifacts/blob/main/AntivirusArtifacts2.pdf

A list of Reverse Engineering articles, books, and papers https://github.com/onethawt/reverseengineering-reading-list

Anti Analysis using api hashing https://neil-fox.github.io/Anti-analysis-using-api-hashing/

The official community group is up 🥳🥳🎉 Please read and remember to stick to the rules. Make it a valuable place for learning and sharing knowledge with each other. If anything is unclear, please ask for clarification. After that. [[ Rules ]] - The sole language in the chat is English. Messages in any other language will be removed and a warning will be issued. - Off-topic messages will be removed without warning. This is not a technical support channel. - Although this is already covered in the "no off-topic" rule, the high amount of offenders caused this to be a specific rule: asking for help after a ransomware infection or for cracking a software is off-topic and thus not permitted. - Be civil, clear and concise when asking a question. No one in this chat is obliged to answer your question. Help is given on a voluntary basis, and cannot be demanded as such. Depending on the severity of the offense, a warning will be given. After a few warnings, you will be removed from the group on a permanent basis. - Copyrighted material which is not to be distributed, is not to be distributed in this channel. Any form of illegal content sharing is strictly forbidden. Breaking this rule results in a permanent ban. - Any illegal activity is forbidden, causing you to be permanently removed from the group without warning. Enjoy! @reverseengineeringz

SoReL-20M: A Huge Dataset of 20 Million Malware Samples Released Online https://thehackernews.com/2020/12/sorel-20m-huge-dataset-of-20-million.html

pe_unmapper convert beteween the PE alignments (raw and virtual). https://github.com/hasherezade/libpeconv/tree/master/pe_unmapper

Ghidra-Jupyter https://github.com/GhidraJupyter/ghidra-jupyter-kotlin