/r/lowlevel

Photograph via snooOG

Low level programming and hacking subreddit for Linux and Windows.

  • Kernel Exploits
  • Low level programming techniques
  • Interesting articles
  • Help
  • /r/lowlevel

    12,395 Subscribers

    1

    Research paper on reverse engineering.

    So the IEEE club of my university offered me to do do a research and lead a research team on any subject. The common topic for research would be AI and ML but i have decent knowledge of reverse engineering and low level stuff so i wanted to work on this subject rather than AI and ML.

    So i am looking for suggestions on what unique thing I can explore and research in reverse engineering. I searched online and most of the stuff related to RE is related to malware analysis, I am also open for that idea but I first need to know my goal exactly so here I am asking for help from reddit gods. I have experience with exploring malicious stuff with volatility but again I want something unqiue with a good learning outcome so that the paper actually gets published.

    One idea that has been in my mind was on reverse engineering self modifying binaries, but just analysis binaries with a RE framework won't be enough so I wanted to extend this by adding some more things into it like if I have a binary that injects shellcode during runtime and then modifies that shellcode etc etc. So pls suggestions are welcomed.

    5 Comments
    2024/04/24
    12:57 UTC

    4

    The Apple M-Series GoFetch Attack

    3 Comments
    2024/03/27
    13:30 UTC

    2

    About how many times have you encountered "EXC_BAD_ACCESS" when developing a program?

    4 Comments
    2024/03/01
    07:09 UTC

    0

    Determine DLLs needed by EXE complete tutorial

    2 Comments
    2024/02/09
    16:54 UTC

    1

    Any way to convert yahoo raw messages to actual text?

    Trying to learn how this works, is it possible to decrypt it somehow and turn it back to text?

    Received: from 10.196.198.206
     by atlas104.sbc.mail.bf1.yahoo.com with HTTPS; Thu, 17 Mar 2022 11:53:52 +0000
    Return-Path: <*** Email address is removed for privacy ***>
    X-Originating-Ip: [52.234.172.104]
    Received-SPF: pass (domain of microsoft.com designates 52.234.172.104 as permitted sender)
    Authentication-Results: atlas104.sbc.mail.bf1.yahoo.com;
     dkim=pass header.i=@microsoft.com header.s=s1024;
     spf=pass smtp.mailfrom=microsoft.com;
     dmarc=pass(p=REJECT) header.from=microsoft.com;
    X-Apparently-To: *** Email address is removed for privacy ***; Thu, 17 Mar 2022 11:53:52 +0000
    X-YMailISG: ..0BlFQWLDsnrF59SLN_NDjh3FFmpir0aJBc.r7Sl.MEJL8F
     hjaHo80k0lMmKeBwRrHd9gwu3_jse2_Zk4B4XeDNCOxsFUFNIG9DsuzKrjpz
     bNxWDwNxlqT9FyilZDyrEoILG_UF8jeIzdTnlWMv6CIhTbQu7I8dhToGdCol
     dKWUgiRUXmRIY0JFM7BskQ2A3IhJ0ovVCXIRucwj6X66HcxryAFrGAOebAhz
     3agQI0wHhNevR8cNv7KG.ajqsxw7sYQDAR5dZf7Cfo2mjvLS66OTa9f96Zz5
     DEiu24xKi9bq6Iytv2b5Jw9bJo_Mjqhd9ysl6EHFu6qU0sUdFF96rFjAviH1
     oTy.6wpcbdEegPcP5IubsaRyWmTc6Sw3wQSPYf2jzI1DP7Apla.Wgh691lAD
     SgZiY89H9B.8vM4jeSyOWgejN1.EoAfn.Ua.mOoByCRwIgNju770AU2CU1Td
     PTvum3GW_9seAiVnoLopODiQqGowu71X2AheqRta0JBVXfflu9lwnt83mq1W
     MkLwEKxNK619ZbQPPSf3ULLAKEL6eB.X83EbVVQQoedSHUBj6J945Vrfm8f9
     Vhh1CS0yoGeraA53KfFn38DezBTGj4qDLVI2wYX7uajQ6JQWcocFmGddRonU
     OGRWom27vm92hw4y5aOsw7dP_OkPTqoHhDBBEG6.vpjps_z29Bj3xQDlp30u
     SeO8fAjQzf3DMidWQbNzyxmJAKEGpdZxtT.54aiB5MKqBpyjYaumqfZu_h_c
     Cv9dW5rv95XI1reQ9OJIOrdg1NZr7fYboP_DLMt51YAJTHeLx_oLlHyy6ZQz
     dA_O6GRGlKiq7rGWwdRVoKYEgjp3B.YDFWbLtf1UDBKzQbgDA.JUEpxzxa09
     vGeGSHEeGXgOpCvGY8g6ofDjM1xsphL3De2QFEgkHubcM0ndCweXjyZz_z06
     EaHnx4qyEvAiKpSpazCsjUzTnSFWDtWeDqov5_y_g4AxfGG1trlRbujZNRgW
     XR342GEmAqNbM_BafuiWgVj_hiRaWo63eRgb5zgyhAERsGZKPxjdh4RO1Lmb
     brHn4L.ifUxOhC.zQ814w4S23GwLxe1Jua2z7uriGhmXPaB3b1da4PEIvxMi
     jk4WRpHHpObwwCc.x56C97ra7N5WKQtsKRljczFgGaG3ja6e.bxaD7QyFq72
     XWc-
    3 Comments
    2023/09/28
    16:15 UTC

    0

    Lost my Microsoft USB mouse dongle, want to change the frequency of another dongle to match my mouse

    Hi,

    Do you know how I could possible take a different (but same) microsoft dongle, and change the frequency to match my mouse? and how do I even check that frequency?

    Even if not necessary and i can just buy a new one, this seems like a fun DIY project.

    Would love some help, thanks :)

    P.S. the mouse is the microsoft ergonomic sculpt mouse.

    5 Comments
    2023/09/26
    12:03 UTC

    1

    My nasm program crashes and I think I know how, but I don't know how

    My nasm program crashes

    So, I think I understand what's going on. The program after the call to main jumps to address 0, which is obviously invalid. Which tells that ret is popping 0 (the top of the stack) into rip. But how is 0 to the top of the stack in this instance?

    global _start
    
    section .text
    _start:
       call main
       
       xor  rdi, rdi
       xor  rsi, rsi
       mov  rax, 60
       syscall
       
    main:
        push    rbp
        mov     rbp,rsp
    
        mov     rdi, msg
        call    print
    
        mov     rsp, rbp
        pop     rbp
        ret
        
    print:
        push    rbp
        mov     rbp,rsp
        sub     rsp, 0x8
    
        mov     [rbp], rdi
        mov     rax, [rbp]
        mov     rsi, rax
        mov     rdi, 1
        mov     rbx, 7
        mov     rax, 1
        syscall
    
        mov     rsp, rbp
        pop     rbp
        ret
    
    section .data
        msg: db "aaaaa",100
    4 Comments
    2023/09/17
    02:34 UTC

    2

    How to write a printer's driver for linux?

    Hi! I own an old samsung printer that still works that I would like to use with my lubuntu OS unfortunately seems it's available only the windows version of the driver. I would like to write the driver for my lubuntu machine. Any advice on books or resources that can help me understand how to do this? Thanx a lot

    2 Comments
    2023/09/13
    04:48 UTC

    3

    [GNU + Linux] I've built a tool to check if your function calls are secure.

    I've developed a utility that assesses the robustness of your function calls. For instance, it verifies if your program behaves correctly in the event of a malloc failure. This tool scrutinizes every malloc operation within your program during runtime, without the need for code parsing. It's not limited to just malloc; it can evaluate over 200 different functions.

    The tool is used similarly to Valgrind. Here's an example of how to use it:

    ```bash

    funcheck ./your_binary

    ```

    Here is the repo link:

    [https://github.com/tmatis/funcheck](https://github.com/tmatis/funcheck)

    1 Comment
    2023/09/08
    21:53 UTC

    1

    [GNU + Linux] I've built a tool to check if your function calls are secure.

    I've developed a utility that assesses the robustness of your function calls. For instance, it verifies if your program behaves correctly in the event of a malloc failure. This tool scrutinizes every malloc operation within your program during runtime, without the need for code parsing. It's not limited to just malloc; it can evaluate over 200 different functions.

    The tool is used similarly to Valgrind. Here's an example of how to use it:

    funcheck ./your_binary

    Here is the repo link:

    https://github.com/tmatis/funcheck

    0 Comments
    2023/09/08
    21:53 UTC

    Back To Top