Z0FCourse ReverseEngineering

Ce projet est un cursus éducatif structuré et un guide pédagogique axé sur le reverse engineering Windows x64. Il fournit un programme pour analyser et décompiler des binaires Windows à travers l'étude du langage assembleur et des rouages internes du système d'exploitation.

Le matériel couvre l'analyse de binaires Windows et l'analyse de malware, avec un accent particulier sur l'interprétation du code machine x64 pour récupérer la logique originale du programme. Il guide l'utilisateur à travers le processus de traçage du comportement du programme et de journalisation des appels de fonction pour comprendre comment les binaires fonctionnent.

La portée technique inclut la décompilation au niveau assembleur, l'inspection d'état pilotée par débogueur et le traçage d'appels dynamique. Il couvre également l'analyse basée sur les instructions, le hooking d'API Windows et le mappage des registres x64 pour surveiller comment le logiciel interagit avec le système.

Features

Reverse Engineering Tools - Offers a structured curriculum for analyzing and decompiling binaries through assembly and OS internals.
Reverse Engineering Courses - Provides a structured curriculum for analyzing and decompiling Windows binaries by studying assembly and OS internals.
Binary Analysis - Teaches how to analyze x64 executable files specifically for the Windows operating system.
Behavioral Tracing - Provides techniques for logging function calls and execution paths to observe program interaction with the system.
Binary Decompilation - Provides instructional material on translating x64 machine code into human-readable logic to reconstruct compiled programs.
Binary Execution Analysis - Instructs on logging function calls and tracing program behavior to understand binary operations.
Instruction Analysis Tools - Breaks down binary execution into assembly instruction sequences to map the program's logical flow.
x64 Assembly Analysis - Provides a guide to studying low-level x64 machine code to recover program logic from binaries.
Dynamic System Tracing - Guides users in logging function entry and exit points during runtime to identify active code paths.
Binary Analysis Tutorials - Ships instructional material on tracing program behavior and logging function calls in x64 binaries.
Windows Assembly Guides - Provides a guide to interpreting x64 machine code and reverse engineering software for Windows.
Windows System Hooks - Covers the interception of system calls between binaries and the Windows OS to monitor activity.
Malware Analysis - Applies reverse engineering techniques to investigate malicious software and its impact on Windows hosts.
Call Convention Analysis - Explains how to track x64 hardware registers to understand data passing in a 64-bit environment.
Execution State Debuggers - Teaches how to use debuggers to pause execution and inspect memory heaps and stack frames.

Historique des stars

0xZ0FZ0FCourse_ReverseEngineering

Name: 0xz0f/z0fcourse_reverseengineering
Author: 0xZ0F

View on GitHub

5,852 stars584 forksC++AGPL-3.014 vues

Z0FCourse ReverseEngineering

Features

Reverse Engineering Tools - Offers a structured curriculum for analyzing and decompiling binaries through assembly and OS internals.
Reverse Engineering Courses - Provides a structured curriculum for analyzing and decompiling Windows binaries by studying assembly and OS internals.
Binary Analysis - Teaches how to analyze x64 executable files specifically for the Windows operating system.
Behavioral Tracing - Provides techniques for logging function calls and execution paths to observe program interaction with the system.
Binary Decompilation - Provides instructional material on translating x64 machine code into human-readable logic to reconstruct compiled programs.
Binary Execution Analysis - Instructs on logging function calls and tracing program behavior to understand binary operations.
Instruction Analysis Tools - Breaks down binary execution into assembly instruction sequences to map the program's logical flow.
x64 Assembly Analysis - Provides a guide to studying low-level x64 machine code to recover program logic from binaries.
Dynamic System Tracing - Guides users in logging function entry and exit points during runtime to identify active code paths.
Binary Analysis Tutorials - Ships instructional material on tracing program behavior and logging function calls in x64 binaries.
Windows Assembly Guides - Provides a guide to interpreting x64 machine code and reverse engineering software for Windows.
Windows System Hooks - Covers the interception of system calls between binaries and the Windows OS to monitor activity.
Malware Analysis - Applies reverse engineering techniques to investigate malicious software and its impact on Windows hosts.
Call Convention Analysis - Explains how to track x64 hardware registers to understand data passing in a 64-bit environment.
Execution State Debuggers - Teaches how to use debuggers to pause execution and inspect memory heaps and stack frames.

Alternatives open source à Z0FCourse ReverseEngineering

Projets open source similaires, classés selon le nombre de fonctionnalités partagées avec Z0FCourse ReverseEngineering.

mentebinaria/retoolkit
mentebinaria/retoolkit
5,222Voir sur GitHub
Retoolkit is a reverse engineering tool orchestrator and malware analysis environment provisioner for Windows. It functions as a binary analysis workflow automator that installs and configures the specialized software toolchains required for security research. The project manages the execution and lifecycle of standalone analysis binaries through a registry-based Windows shell context menu. This integration allows users to launch external tools directly from the file system right-click menu by passing selected file paths as command line arguments to third-party executables. The system covers
Inno Setupinno-setupmalware-analysisreverse-engineering
Voir sur GitHub5,222
mandiant/flare-floss
mandiant/flare-floss
3,886Voir sur GitHub
Flare-floss is a security utility and static binary string extractor designed to uncover hidden text and configuration data within compiled binaries. It functions as an obfuscated string decoder and reverse engineering tool to translate encoded strings into readable text for security auditing. The project employs emulated execution to capture the decrypted state of strings in memory by running small chunks of binary code in a virtual CPU. It further utilizes static analysis disassembly, intermediate representation analysis, and heuristic-based pattern matching to identify and decode strings t
Pythondeobfuscationflaregsoc-2026
Voir sur GitHub3,886
avast-tl/retdec
avast-tl/retdec
8,556Voir sur GitHub
Retdec is an LLVM-based machine code decompiler and static binary analysis tool designed for binary reverse engineering. It translates binary executable code into high-level representations to facilitate the reconstruction of program logic from compiled machine code. The system utilizes a retargetable frontend architecture and a multi-stage lifting pipeline to convert raw bytes into a common intermediate language. It differentiates custom program logic from known library code through signature-based identification and provides utilities for binary symbol demangling to restore human-readable n
C++
Voir sur GitHub8,556
radare/radare2
radare/radare2
24,129Voir sur GitHub
radare2 is a reverse engineering framework and binary analysis toolset. It functions as a multi-architecture disassembler, low-level binary debugger, and hexadecimal editor for inspecting executable structures and interpreting machine code when original source files are unavailable. The framework provides capabilities for decompiling machine instructions, performing symbolic analysis, and diffing binary files to identify structural changes across versions. It also includes a digital forensic analyzer and disk analyzer for browsing filesystem formats in userland. The toolset supports binary p
C
Voir sur GitHub24,129

Voir les 30 alternatives à Z0FCourse ReverseEngineering

Questions fréquentes

Que fait 0xz0f/z0fcourse_reverseengineering ?

Quelles sont les fonctionnalités principales de 0xz0f/z0fcourse_reverseengineering ?

Les fonctionnalités principales de 0xz0f/z0fcourse_reverseengineering sont : Reverse Engineering Tools, Reverse Engineering Courses, Binary Analysis, Behavioral Tracing, Binary Decompilation, Binary Execution Analysis, Instruction Analysis Tools, x64 Assembly Analysis.

Quelles sont les alternatives open-source à 0xz0f/z0fcourse_reverseengineering ?

Les alternatives open-source à 0xz0f/z0fcourse_reverseengineering incluent : mentebinaria/retoolkit — Retoolkit is a reverse engineering tool orchestrator and malware analysis environment provisioner for Windows. It… mandiant/flare-floss — Flare-floss is a security utility and static binary string extractor designed to uncover hidden text and configuration… avast-tl/retdec — Retdec is an LLVM-based machine code decompiler and static binary analysis tool designed for binary reverse… radare/radare2 — radare2 is a reverse engineering framework and binary analysis toolset. It functions as a multi-architecture… aquynh/capstone — Capstone is a multi-architecture disassembly framework and binary translation system. It converts binary machine code… x64dbg/scyllahide — ScyllaHide is an anti-debugger bypass plugin and reverse engineering tool designed to hide a debugger from a target…