 | netspooky/pdiff2 // A revised version of the pdiff tool |
 | Protocol RE Talk // Slides, notes, and resources from a talk I did on Protocol RE |
| scare - Simple Configurable Assembly REPL and Emulator // A multi-arch assembly REPL and emulator for your command line. |
 | list_protos.sh // List all the protocols in a given pcap using tshark |
| The PCAP File Format // Descriptions of PCAP and PCAPNG files |
 | BGGP3: LEMONADE.BIN // BGGP3 entry that DOSes Rizin and Radare2 with SOPHIE lyrics. |
| RE Tips: Common String Representations // How strings look in binary form |
| netspooky/importsort // A python tool to group imports from multiple Windows Binaries. |
| RE Tips: Timestamps // Identifying timestamps in unknown protocols and binary formats |
| Encoding Mutations: A Base64 Case Study // Writeup about (ab)using base64 implementations |
| Python 3.7+ .pyc file format // Notes on the .pyc format |
| netspooky/pdiff // A revised version of the pdiff tool |
| Intro to Firmware Analysis (PancakesCon2020) // Notes from my talk about analyzing firmware at PancakesCon 2020. |
| netspooky/inhale // A malware static analysis and classification tool. |
Reverse Engineering
[: :]