Reverse Engineering

How To: Extract Network Indicators of Compromise (IOCs) from Maldoc Macros Part 1: https://security-soup.net/extractnetworkindicators-part1/ Part2: https://security-soup.net/how-to-extract-network-indicators-of-compromise-iocs-from-maldoc-macros-part-2/ Part3: https://security-soup.net/how-to-extract-network-indicators-of-compromise-iocs-from-maldoc-macros-part-3/

Online x86 / x64 Assembler and Disassembler This tool takes x86 or x64 assembly instructions and converts them to their binary representation (machine code). It can also go the other way, taking a hexadecimal string of machine code and transforming it into a human-readable representation of the instructions. It uses GCC and objdump behind the scenes. https://defuse.ca/online-x86-assembler.htm#disassembly

IP Address Tools Online https://www.ipvoid.com/

“BOLO: Reverse Engineering — Part 1 (Basic Programming Concepts)” by Daniel A. Bloom https://link.medium.com/ionnGU8g5Z

FLARE VM - a fully customizable, Windows-based security distribution for malware analysis, incident response, penetration testing, etc. https://github.com/fireeye/flare-vm

Automatic Exploit Generation (AEG) and remote flag capture for exploitable CTF problems https://github.com/ChrisTheCoolHut/Zeratool

Automatic exploit generation for simple linux pwn challenges. https://github.com/xct/ropstar

A VBA parser and emulation engine to analyze malicious macros. https://github.com/decalage2/ViperMonkey

This page deals with the PE format, or more specifically, x86/x64 Windows (from XP to W7) binaries. https://corkamiwiki.github.io/PE