Four Years of Service
Posts: 35
Threads: 3
Libs/tools to help reverse engineer custom binary file structs? 01-03-2022, 09:08 AM
#1
My ADHD combined with ignorance, and a pinch of arrogance makes RE'ing binary files a massively tedious process and I'm sure I am working harder instead of smarter.
For the most part I just use a combo of my own scripts,
Cutter, and
Kaitai Struct IDE to do this, but it gets super tedious mapping, referencing, testing, guessing, etc. So I'm wondering if there is anything libs or tools to help speed up the process.
What I'd love is something that reads the file bytes and at least takes a stab at guessing obvious types. Stuff like bytes that look like they could reasonably be timestamps, arrays, etc. I've written a few shitty tools to help with this but I end up wasting a bunch of time on my code and not the file. Ya know, why spend time doing the actual work when you can waste even more time writing something to automate it
(This post was last modified: 01-03-2022, 09:08 AM by Bricker.)
"I can picture in my mind a world without war, a world without hate. And I can picture us attacking that world because they'd never expect it." - ಠ_à²
Four Years of Service
Posts: 35
Threads: 3
RE: Libs/tools to help reverse engineer custom binary file structs? 01-03-2022, 03:59 PM
#3
(01-03-2022, 10:14 AM)convector Wrote: Your ADHD and arrogance might get in the way but do you mind check these out?
Definitely ADHD, but these seem pretty interesting so I can probably make it through. I know Cutter integrates Ghidra (at least some of it), but I should probably spend some time with the actual Ghidra suite so I can give that GEARSHIFT script a go. Looks pretty damn cool.
Quote:And also, can you share or do you perhaps know what the binary files written in what programming language?
Mostly the files come from older smart devices so I'm guessing C, and possibly rust for some newer stuff. Kinda more obscure smart watches, dishwashers, etc.
"I can picture in my mind a world without war, a world without hate. And I can picture us attacking that world because they'd never expect it." - ಠ_à²
![[+]](https://sinister.ly/images/modern/collapse_collapsed.png)
•
Five Years of Service
Posts: 743
Threads: 63
RE: Libs/tools to help reverse engineer custom binary file structs? 01-04-2022, 02:29 PM
#5
I regularly use Ghidra. Personally, it's my favorite. But there's a bit of a learning curve.
ed25519/0x21AB6B6A6CB2C337
C87D87466FD205945CF10A3821AB6B6A6CB2C337
•
Five Years of Service
Posts: 743
Threads: 63
RE: Libs/tools to help reverse engineer custom binary file structs? 01-04-2022, 02:44 PM
#7
Strings, remnux, OllyDBG and many others. I still end up using the tried and true methods in Remnux and occasionally Kali Linux to get tools without having to configure everything myself every time I need to pick things apart. I also use a lot of Python and other languages like Ruby to help automate processes.
ed25519/0x21AB6B6A6CB2C337
C87D87466FD205945CF10A3821AB6B6A6CB2C337
•
Four Years of Service
Posts: 35
Threads: 3
RE: Libs/tools to help reverse engineer custom binary file structs? 01-05-2022, 12:49 AM
#8
(01-04-2022, 02:19 PM)convector Wrote: Oh I see. I guess it's a job am I right? Rust is good stuff and kinda tough to reverse engineer.
Kinda 50/50. I played around a bit on personal projects so that meant I had a little more than 0 experience, which made me the resident expert
Quote: I have a favor to ask you, can you also explore binary files written with V Programming Language?
Haven't done much with V but I could probably give it a go when I have some free time available.
"I can picture in my mind a world without war, a world without hate. And I can picture us attacking that world because they'd never expect it." - ಠ_à²
•
Five Years of Service
Posts: 539
Threads: 10
RE: Libs/tools to help reverse engineer custom binary file structs? 01-05-2022, 04:06 PM
#10
+1 for Ghidra.
Although I'm pretty sure I don't use it at its full potential..
Any Ghidra tutorial/doc to recommend maybe?
•
