Est. read time: 1 minute | Last updated: August 30, 2025 by John Gentile

Contents

Analysis

  • Start with basic GNU file utilities like file to show what kind of file it looks to be based on standard headers (e.g. ELF executable or zip archive), and use strings to see if any unobfuscated strings stand out.

Tools

  • Ghidra: Ghidra is a software reverse engineering (SRE) framework created and maintained by the National Security Agency Research Directorate.
  • IDA: Multi-OS disassembler and debugger with many advanced features.
  • AFL++: The fuzzer afl++ is afl with community patches, qemu 5.1 upgrade, collision-free coverage, enhanced laf-intel & redqueen, AFLfast++ power schedules, MOpt mutators, unicorn_mode, and a lot more!

References



Maintained by John Gentile • Found a problem on this site? File an Issue
This work is licensed under a Creative Commons Attribution 4.0 International License.