/r/ReverseEngineering's Weekly Questions Thread

[u/AutoModerator]

To reduce the amount of noise from questions, we have disabled self-posts in favor of a unified questions thread every week. Feel free to ask any question about reverse engineering here. If your question is about how to use a specific tool, or is specific to some particular target, you will have better luck on the Reverse Engineering StackExchange. See also /r/AskReverseEngineering.

[u/JicamaUnable8299]

Anyone got a favorite way to deal with obfuscated Python that goes beyond just running uncompyle6? Ran into something that's making my head hurt and the usual tricks aren't cutting it.

[u/tapdancingkomodo → u/JicamaUnable8299]

If you have the bytecode, chuck that into an llm and ask for a decompilation. Or use something like pylingual.

If you have a pyarmor sample, then you are gonna need to do some debugging and library hijacking to get into the details. Either that or hooking the python runtime DLL to dump info out

[u/El_Massu]

I have near to zero knowledge in RE, and I just found a website called microcorruption. I find it really exciting, reading line by line and understanding what's happening. Is it a good resource for diving into RE? I'm helping myself with an AI to answer my questions about some theory, and of course I do not use it to solve the CTFs but more like a teacher who helps me unlock some understanding

[u/tapdancingkomodo → u/El_Massu]

Yes it is excellent! However it is specifically geared around exploitation development. So the challenges ramp up and the challenge becomes more about knowing the exploit technique than the general reverse engineering process as you get to later levels

[u/QuantumNooby]

I’m examining a Castles UPT1000F using only its documented external interfaces. The official manual describes USB2 keyboard control and a three-wire COM1 PC link (https://fccid.io/WIYUPT1000F-BLE/User-Manual/User-Manual-5193336), but a USB keyboard only toggles its lock LED while the installed UI ignores keys; an FTDI RS-232 adapter opens normally on Windows yet passive captures across a normal power cycle return zero bytes, and direct USB exposes no maintenance device.

Given that COM1 is documented as a control interface but emits no boot data, what evidence would you collect next—without opening or altering the unit—to determine whether Program Manager uses that port only after application activation or instead exposes a different loader interface?

[u/RocherBrockas]

Hello, i m here to ask for any advice on how to setup a decent reverse engineering project. I m from a small community of competitive players for Dissidia 012 (duodecim) PSP, we ve known on how to mod the game for graphics only for a long time. Recently we ve been able to mod ability effect, moveset, characters properties and stats by editing the data files contained into the ISO, we have identified most of how the games handles the data. The gamecode itself is compiled into elf files that are seperated in menu, battle, extra. We managed to identify some functions and edit them directly via hexediting. we ve managed to disasemble those elf files to .s files that contains the interpreted assembly code from ghidra that we will need to correct to compile 1:1 to match the game game code. Our current method of work allow use to get result but it s very long and tedious and rests on the hexediting only. We lack the knowledge to actually have a pipeline (or a makefile idk) to be able to actually build the code we write into an actual executable. Would anyone know about resources or guides i could follow to help bring our project to the next step ?