Clop Ransomware Group Claims the Hack of Harvard University

https://securityaffairs.com/183282/cyber-crime/clop-ransomware-group-claims-the-hack-of-harvard-university.html

@reverseengine

Reverse Engineering for Noobs

https://aceresponder.com/blog/reversing-for-noobs

@reverseengine

Bypassing EDR using an In Memory PE Loader

https://g3tsyst3m.com/fileless%20techniques/Bypassing-EDR-using-an-In-Memory-PE-Loader/

@reverseengine

Reverse Engineering WannaCry Ransomware => A Deep Dive

https://infosecwriteups.com/reverse-engineering-wannacry-ransomware-a-deep-dive-86ee4a8d7c7a?source=rss----7b722bfd1b8d---4

@reverseengine

Reverse Engineering the Android Malware

https://www.linkedin.com/pulse/reverse-engineering-new-android-malware-targeting-ukfie/

@reverseengine

Hypervisors for Memory Introspection and Reverse Engineering

https://secret.club/2025/06/02/hypervisors-for-memory-introspection-and-reverse-engineering.html

@reverseengine

ClayRat A New Android Spyware Targeting Russia

https://zimperium.com/blog/clayrat-a-new-android-spyware-targeting-russia

@reverseengine

GhostBat RAT Inside the Resurgence of RTO Themed Android Malware

https://cyble.com/blog/ghostbat-rat-inside-the-resurgence-of-rto-themed-android-malware/

@reverseengine

جریان اصلی وقتی یک تابع صدا زده میشه:

1️⃣ call func

آدرس بعد از call (return address) پوش میشه رو استک


2️⃣ داخل تابع:

RBP ذخیره میشه

فریم استک ساخته میشه

3️⃣ متغیرها آرگومان‌ ها استفاده میشن

4️⃣ leave → فریم قدیمی برگردونده میشه

5️⃣ ret → caller برگشت به

The basic flow when a function is called:

1️⃣ call func

The address after the call (return address) is pushed onto the stack

2️⃣ Inside the function:

RBP is saved

A stack frame is created

3️⃣ Variables and arguments are used

4️⃣ leave → Old frame is returned

5️⃣ ret → caller returns to

@reverseengine

Safeguarding Code Against Reverse Engineering

https://www.youtube.com/watch?v=Ie1eZSiMEJ8

https://github.com/emproof-com/webinars/tree/main/2025-01-software_protection

@reverseengine

DiffRays

ابزاری پژوهش‌ محور برای تغییر پچ‌ های باینریه که برای کمک به تحقیقات در زمینه توسعه اکسپلویت‌ های آسیب‌پذیری و مهندسی معکوس طراحی شده

DiffRays is a research-oriented tool for binary patch diffing designed to aid in vulnerability research exploit development and reverse engineering

https://github.com/pwnfuzz/diffrays

@reverseengine

ghidraMCP

Now AI Can Reverse Malware

https://www.youtube.com/watch?v=u2vQapLAW88

@reverseengine

Aiding Reverse Engineering with Rust and a local LLM

https://security.humanativaspa.it/aiding-reverse-engineering-with-rust-and-a-local-llm/

@reverseengine

Chaos Rootkit

https://github.com/ZeroMemoryEx/Chaos-Rootkit

@reverseengine

Reverse Engineering Focusing on x64 Windows

https://github.com/FaxHack/Reverse-Engineering-Course


@reverseengine

Reverse Engineering Windows 7 Minesweeper

https://vollragm.github.io/posts/minesweeper

@reverseengine

System Programming Roadmap

https://github.com/ujjwal-kr/system-programming-roadmap

@reverseengine

WatchDog Killer BYOVD

https://3xploit666.com/post/whatdog-killer-byovd-0cb155a0

@reverseengine

Free Malware Analysis and Reverse Engineering Course

class.malware.re

@reverseengine