Introduction
Reverse Engineering for Beginners - Our textbook.
Assignments
Lecture Notes
Slides
Useful Links
⬇️ Below ⬇️ is an ever expanding collection of resources, useful links, and other items of interest that may help you through this course.
Resources
Websites
- RE subreddit
- Formal Program Analysis Reading
- Veteransec
- Cybersecurity Community | Blog Posts and Other Writeups
- Buffer Overflow Tutorials
- HackerNews
Learn Through Doing
Tools
- IDA Freeware - Old version of commerical-grade dissassembler and debugger.
- Radare2 - Powerful dissassembler and debugger. CLI only, has some GUI extensions though.
- Online Compiler - Tool used in class to quickly demonstrate various compilations of C and C++ code.
- NSA Reversing Tool (GHIDRA) - Announcement of new government used tool for reversing.
- More Info - Reddit thread discussing this announcement.
- Free Online Dissassembler
Binary Exploitation
Please be very careful as to where you are performing such exploits. These are carefully curated sites that allow these exploits only to be performed on the challenges provided. Do not use this knowledge for evil, and only use it as directed on each site.
** YOU CAN END UP IN PRISON IF YOU DO NOT FOLLOW THESE INSTRUCTIONS **
- http://pwnable.kr - Wargame site that features a server for you to test your skills with buffer overflows and the like
- https://crackmes.one/ - Website that hosts free binaries for you to crack and reverse. Test your skills!
Respected Professionals
- C-Level
- Mark Rogers
- Head of Security Operations at DEFCON
- VP Cybersecurity Strategy for Okta
- Geoff Belknap
- CSO of Slack
- Michael Coates
- Head of security at Mozilla
- Former CISO of Twitter
- Mark Rogers
- Journalism
- Eric Geller
- Cybersecurity reporter at @politico
- Zack Whittaker
- Security editor, @TechCrunch
- Eric Geller
- Named
- Amit Serper
- Head of security research @cybereason Nocturnus
- Matt Blaze
- “Scientist, safecracker, professor, writer.”
- Travis Ormandy
- Vulnerability researcher at Google
- James Forshaw
- Security researcher in Google Project Zero
- Zachary Cutlip
- Offensive security researcher
- Amit Serper
- Nameless
- @thegrugq
- Security Researcher
- Swift on Security
- Very funny and informative security twitter
- Thinks they are Taylor Swift
- @pwnallthethings
- @thegrugq
Websites
- Adam Doupé - Assistant Professor, Arizona State University