Questions tagged [reverse-engineer]
The reverse-engineer tag has no usage guidance.
27
questions
0
votes
0
answers
41
views
Trouble mounting SquashFS filesystem from TP-Link Deco M5 router firmware
Question
I am new to reverse engineering and trying to retrieve the file system of a TP-Link Deco M5 router from its firmware. I have successfully extracted the SquashFS filesystem from the firmware ...
0
votes
0
answers
3k
views
how to fix error zipalign: symbol lookup error: zipalign: undefined symbol: _ZN11zip_archive7InflateERKNS_6ReaderEjjPNS_6WriterEPm
I installed zipalign in kali linux but when i run the command i got the error:
zipalign: symbol lookup error: zipalign: undefined symbol:
_ZN11zip_archive7InflateERKNS_6ReaderEjjPNS_6WriterEPm
0
votes
0
answers
32
views
How to access a read protected SD card? [duplicate]
EDIT: please note unlike this question Fix SD card that cannot be formatted
I for 1 have READ protection, not WRITE protection
also, I dont want to format the card, i want to retrieve data from it. My ...
1
vote
1
answer
2k
views
Where does the `Dism /online /Get-Features` get the list of features from?
Where does the Dism /online /Get-Features read the list of features from? For example: which files or directories.
0
votes
0
answers
1k
views
How do I mount LZMA filesystem or extract to modify them
I am working on a firmware with binwalk a bunch of LZMA compressed data ...
-----------------------------------------------------------------------------------------------------------------------------...
-1
votes
1
answer
269
views
Reverse engineering unknown hex/binary representation to decimal
I am decoding a device that pumps out location data via network packets.
Lets say we have want to decode altitude. The altitude packet is 4 bytes. So the info in hex is.
0x05 0x79 = 5.945313(meters)
...
0
votes
0
answers
500
views
Dump memory of process which exits immediately
I am doing a little keygen challenge (written in Haskell), which accepts one commandline argument (a license) and exists after checking if the provided string is valid or not.
Hence I am not able to ...
0
votes
1
answer
67
views
Is that possible to see *.exe reaching which files?
Sorry for my english i'm still trying to improve it. Let me explain my problem. I have a suspicious exe and i'm gonna run it on virtual machine. I want to see which folders or files it's try to reach (...
0
votes
2
answers
545
views
How can I restrict a program to call API functions that are related to the registry?
I use a program that behaves in a way I dont quite like. It can write to the registry even if it is run under a user which has no administrator priviliges. I dont believe there is enything else I can ...
6
votes
1
answer
9k
views
How to discover and list static libraries used by a software in Linux?
Background: We have a third-party vendor software for our Linux distribution that we are currently testing on lubuntu. We have the installation files and an install.sh shell script that installs the ...
0
votes
1
answer
1k
views
Mysql workbench reverse engineer relationship
I've been trying to create a EER diagram from a MySql script. I've used the appropriate option in MySQL workbench (Import > Reverse Engineer MySQL Script)
However, the relationships are not shown, ...
1
vote
0
answers
1k
views
Extracting Realtek Bluetooth firmware from Windows drivers possible? - RTL8723DE
I have a RTL8723DE Wifi-Bluetooth module in a laptop. In Linux—in order to get Bluetooth working—it needs the Bluetooth firmware. I extracted the data .cab files in the Windows driver provided by the ...
0
votes
1
answer
920
views
Find the link of Ubuntu userspace file for WSL
From Windows 10 Anniversary update , Microsoft added Windows Subsystem for Linux. Microsoft articles provide Lxrun.exe /install /y or bash.exe commands to install Ubuntu WSL. Then Lxrun.exe downloads ...
3
votes
1
answer
7k
views
Read or export ASCII of packet payload / data pane in Wireshark?
I am trying to reverse engineer a protocol in Wireshark, and I'm not that familiar with Wireshark. I have found some of the packets that I want, and I can see the XML data in the Data View pane. I ...
1
vote
1
answer
2k
views
How to view sections & addresses of .bin and .hex files in Linux?
I have started reversing a binary. I dumped the contents as hex using xxd into a file I made with extension .hex, then used objdump to disassemble that .hex file into assembly code, and put this into ...
1
vote
0
answers
9k
views
Decompile from .msi
I have an MSI file that was created from an ASP.NET MVC setup project. I want to be able to see if a specific C# change made it into that MSI file.
I used 7-zip to extract the contents, but the only ....
0
votes
0
answers
932
views
MS Edge - hosts file bypassing
As its seems that Microsoft have hardcoded Bing domains somewere - MS Edge bypassing hosts file Bing entries - have anyone an idea how to:
Check where is it hardcoded and possibly find what else is ...
0
votes
0
answers
47
views
Are NVidia ESA values standardized?
I'm presently reverse-engineering the Dell XPS 630 and 730 Master IO boards, to create cross-platform tools that aren't restricted by OS and motherboard. I've completely analyzed the protocol, and ...
1
vote
2
answers
4k
views
Cut down binwalk extracted files
When extracting image files from a firmware dump using binwalk, I get a lot of valid pngs. My problem is the following: All those files are extremely large. They start with the correct beginning but ...
0
votes
1
answer
47
views
Is it possible to copy a flash ad displayed on Skype window?
I need a create a design similar to a flash ad feastured in a Skype window. Can I copy it somehow?
3
votes
1
answer
68
views
Customize action when button is pressed on an external harddrive
I have a Transcend StoreJet external harddrive. It has a button on the outer shell which is used for synchronizing folders and files when it is pressed. There is a software that enables this function. ...
2
votes
2
answers
3k
views
Edit strings of exe file with no resources
I am trying to edit some hardcoded textstrings of a simple application called mininotify, because I want to do some translation. The program has been abandoned by its developer some years ago, and he ...
5
votes
6
answers
51k
views
Is it possible to retrieve source file from an exe?
I have seen my friend retrieving the source-code file from a java '*.class' file.He used some kind of a software for it.
Is it possible to do the same with an '*.exe'? If yes,how can I do it?
Also is ...
4
votes
2
answers
3k
views
Where do chrome/chromium store search keywords?
I've setup a number of special search keywords, such as "yt" so I can type "yt foo" in the URL bar and have it search youtube for "foo". Unlike just about everything else, chrome and chromium don't ...
5
votes
1
answer
349
views
Who is EmilyMarieDaunt or How to read/reverse engineer Master Clips DCF file
Many years ago, I purchased Masterclips 1,250,000. It is a set of about 14 GB of images split between 28 or so CD's. The included MasterClips browsing software still works, more or less, on a modern ...
5
votes
3
answers
24k
views
Is there a good tool to look into a dll library so far? [closed]
Which tool would you recommend?
1
vote
2
answers
738
views
Is there a plugin etc for Firefox that tracks network activity?
I want to be able to use the ABC (Australia) iView page on my mythtv box but without having to use a mouse. And as it's all flash based I'm trying to reverse engineer it to work out where the media ...