Tags
- reverse-engineering 187
- android 79
- frida 57
- ios 38
- ida 28
- hook 24
- unpacking 23
- arm64 20
- obfuscation 17
- windows 17
- de-obfuscation 15
- kernel 15
- native 15
- deobfuscation 14
- vmp 14
- aes 11
- jni 11
- syscall 11
- vmprotect 11
- anti-debugging 10
- signature 10
- svc 10
- llvm 9
- ptrace 9
- zygote 9
- control-flow-flattening 8
- hooking 8
- md5 8
- ollvm 8
- anti-debug 7
- anti-tamper 7
- dex 7
- inline-hook 7
- magisk 7
- packet-capture 7
- pass 7
- seccomp 7
- ssl-pinning 7
- Windows 7
- anti-detection 6
- aosp 6
- binder 6
- IDA 6
- iOS 6
- linker 6
- objective-c 6
- smali 6
- stalker 6
- unicorn 6
- unidbg 6
- windbg 6
- ARM64 5
- art 5
- debugging 5
- device-fingerprint 5
- dlopen 5
- jadx 5
- lldb 5
- okhttp 5
- ollydbg 5
- root 5
- root-detection 5
- source-analysis 5
- virtualization 5
- x86 5
- angr 4
- anti-hook 4
- assembly 4
- bytecode 4
- C++ 4
- cheat-engine 4
- compiler 4
- emulation 4
- firmware 4
- fishhook 4
- Frida 4
- game-security 4
- idapython 4
- instrumentation 4
- license 4
- packer 4
- packing 4
- protocol-reverse-engineering 4
- risk-control 4
- source-code 4
- symbolic-execution 4
- trace 4
- virtual-machine 4
- xposed 4
- AES 3
- ams 3
- anti-fraud 3
- anti-frida 3
- bogus-control-flow 3
- boot 3
- boringssl 3
- bpf 3
- cc_md5 3
- charles 3
- class-dump 3
- classloader 3
- codesign 3
- copy-protection 3
- cronet 3
- cryptography 3
- dalvik 3
- device-fingerprinting 3
- driver 3
- encryption 3
- fart 3
- frida-ios-dump 3
- handler 3
- hikari 3
- ida-pro 3
- idc 3
- interceptor 3
- jailbreak-detection 3
- keygen 3
- libmsaoaidsec 3
- login 3
- malware-analysis 3
- monkeydev 3
- native-hook 3
- ntoskrnl 3
- opaque-predicate 3
- protobuf 3
- protocol 3
- registration 3
- sha1 3
- sign 3
- so-loading 3
- software-protection 3
- soinfo 3
- tracing 3
- VMProtect 3
- wechat 3
- wireshark 3
- x64 3
- x64dbg 3
- zygisk 3
- Android 2
- anti-piracy 2
- apatch 2
- arm 2
- automation 2
- base64 2
- binary-patching 2
- bootloader 2
- call_constructors 2
- cccrypt 2
- cocos2d 2
- code-protection 2
- code-signing 2
- code-virtualization 2
- compiler-optimization 2
- cr3 2
- crc 2
- de-virtualization 2
- debugger 2
- decrypt 2
- dex-vmp 2
- disk-encryption 2
- dlsym 2
- dobby 2
- drm 2
- drony 2
- dumpdecrypted 2
- dynamic-analysis 2
- ebpf 2
- electron 2
- ELF 2
- emulator-detection 2
- eprocess 2
- etw 2
- floppy 2
- flutter 2
- framework 2
- frida-detection 2
- gdb 2
- gum 2
- hardware-breakpoint 2
- hash 2
- hook-detection 2
- hopper 2
- https 2
- il 2
- indirect-branch 2
- init_proc 2
- injection 2
- int13 2
- interception 2
- jit 2
- JIT 2
- key-recovery 2
- keypatch 2
- license-protection 2
- mach-o 2
- mba 2
- method-swizzling 2
- mmap 2
- mtop 2
- Objective-C 2
- OLLVM 2
- opcode 2
- ota 2
- patching 2
- PE 2
- persistence 2
- preservation 2
- proxy-detection 2
- pthread_create 2
- python 2
- qiling 2
- rc4 2
- RC4 2
- reflection 2
- RegisterNatives 2
- rsa 2
- runtime 2
- sandbox 2
- sha512 2
- sigaction 2
- softice 2
- ssdt 2
- static-analysis 2
- storage 2
- string-decryption 2
- Swift 2
- taint-analysis 2
- theos 2
- tls 2
- token 2
- triton 2
- ue5 2
- UEFI 2
- unreal-engine 2
- vdex 2
- vip-bypass 2
- vm 2
- vm-protection 2
- VM-protection 2
- VMP 2
- vulnerability-research 2
- winload 2
- xnu 2
- xor 2
- .NET 1
- .NET-Framework 1
- 360 1
- 360-jiagu 1
- a64dbg 1
- aarch64 1
- abort 1
- ACPI 1
- active-invocation 1
- activity 1
- activity-launch 1
- activitythread 1
- adb 1
- adcpp 1
- adrl 1
- adrp 1
- aes-128-cbc 1
- aes-128-ecb 1
- aes-cbc 1
- agent 1
- ai 1
- aidl 1
- alamofire 1
- alibaba 1
- alpc 1
- AML 1
- android_dlopen_ext 1
- android-id 1
- anti-analysis 1
- anti-bot 1
- anti-cheat 1
- anti-class-dump 1
- anti-disassembly 1
- anti-injection 1
- anti-reversing 1
- apc 1
- apiresolver 1
- apk 1
- apktool 1
- app_process 1
- app-hardening 1
- app-virtualization 1
- apple 1
- application 1
- application-startup 1
- applist 1
- argus 1
- arthas 1
- asar 1
- ASL 1
- asm 1
- auth 1
- authentication 1
- automotive 1
- avb 1
- axprotector 1
- bangcle 1
- Bangcle 1
- basic-block 1
- bcc 1
- BCD 1
- bcdedit 1
- big-number 1
- bilibili 1
- binary-decision-diagram 1
- binary-ninja 1
- bindiff 1
- BIOS 1
- bitlock 1
- BitLocker 1
- block 1
- bluetooth 1
- BogusControlFlow 1
- boot-process 1
- bootmgfw 1
- bootmgr 1
- botnet 1
- br 1
- breakpoint-detection 1
- breakpoints 1
- browser 1
- build-prop 1
- burp 1
- bypass 1
- bytehook 1
- bytenode 1
- c1.dll 1
- c2.dll 1
- canopenurl 1
- cbc 1
- cced 1
- cert-pinning 1
- certificate-pinning 1
- ChaCha20Poly1305 1
- chrome 1
- chroot 1
- cim 1
- clang 1
- clash 1
- class-encryption 1
- class-extraction 1
- ClassLoaderHook 1
- cli 1
- clipsp 1
- clone 1
- cloud-phone-detection 1
- cloud-storage 1
- clr 1
- clutch 1
- code-extraction 1
- code-injection 1
- code-shuffling 1
- code-tracing 1
- codemeter 1
- coderesources 1
- compatibility 1
- conscrypt 1
- control-flow 1
- control-flow-graph 1
- control-flow-obfuscation 1
- copyright-protection 1
- cpu 1
- cpython 1
- crackerxi 1
- crc32 1
- credential-decryption 1
- CRuntimeClass 1
- crypto 1
- CryptoKit 1
- csharp 1
- curve25519 1
- custom-linker 1
- cve-2019-8605 1
- cve-2020-27950 1
- cve-2021-35394 1
- cycript 1
- Cydia-Substrate 1
- cython 1
- d810 1
- Data 1
- data-breakpoint 1
- data-flow 1
- dbg-hooks 1
- dbi 1
- dcerpc 1
- dcq 1
- DDG 1
- ddms 1
- ddos 1
- dead-code-elimination 1
- debuggable 1
- decompiler 1
- decryption 1
- deflattening 1
- delphi 1
- detection 1
- detection-bypass 1
- device-id 1
- devirtualization 1
- dex-packing 1
- dex2jar 1
- dex2oat 1
- dexclassloader 1
- dfa 1
- disassembly 1
- disk-forensics 1
- dl_iterate_phdr 1
- dlclose 1
- dll-hijacking 1
- DllMain 1
- do_dlopen 1
- dotnet 1
- double-ratchet 1
- dpt-shell 1
- driver-analysis 1
- dtrace 1
- dual-app 1
- dumping 1
- dwarf 1
- dyld 1
- dylib 1
- dynamic-binary-instrumentation 1
- dynamic-debug 1
- dynamic-decryption 1
- e2e-encryption 1
- ecc 1
- edbg 1
- efi 1
- embedded 1
- entitlements 1
- enum 1
- environment-setup 1
- Equinox 1
- evasion 1
- excel 1
- exception-handling 1
- exit 1
- exploit-development 1
- fairplay 1
- FairPlay 1
- feature-engineering 1
- file-format 1
- file-monitoring 1
- find_library 1
- find-library 1
- fingerprint 1
- fingerprinting 1
- fla 1
- flare-emu 1
- flex 1
- flexlm 1
- flexnet-publisher 1
- floppy-disk 1
- forensics 1
- fork 1
- foundation-data 1
- freefilesync 1
- frida-analykit 1
- frida-gadget 1
- frida-trace 1
- futex 1
- game-hacking 1
- game-protection 1
- gda 1
- ghidra 1
- ghidra-sleigh 1
- GNU-hash 1
- Go 1
- gorgon 1
- got 1
- gpu 1
- graph-analysis 1
- gsa 1
- gumexeccontext 1
- gumjs 1
- h5 1
- handler-matching 1
- hardening 1
- hardware-detection 1
- hardware-id 1
- hardware-security 1
- heap 1
- heap-spraying 1
- hex-rays 1
- HID 1
- hkdf 1
- hmac 1
- hookzz 1
- Hopper 1
- HSDB 1
- huffman 1
- hwid 1
- ics 1
- ida-dbg 1
- il2cpp 1
- ILCode 1
- IM 1
- import-table 1
- in-app-purchase 1
- in-memory-dex-classloader 1
- inc-file 1
- indirect-call 1
- industrial-control 1
- infinityhook 1
- init 1
- init_array 1
- injection-detection 1
- inline-assembly 1
- int-13 1
- integrity 1
- integrity-check 1
- interpreter 1
- io-redirect 1
- io-redirection 1
- ioctl 1
- iosurface 1
- ipa 1
- ipc 1
- iqiyi 1
- isaac64 1
- itunesstored 1
- jailbreak 1
- java 1
- Java 1
- java-reflection 1
- javascript 1
- javassist 1
- jdwp 1
- jiagu 1
- JNI 1
- jni-onload 1
- jnitrace 1
- js-instrumentation 1
- jtool 1
- kbsync 1
- kernelsu 1
- keylog 1
- keystone 1
- launcher 1
- lazy-encryption 1
- lazy-symbol 1
- ldid 1
- LDR_DATA_TABLE_ENTRY 1
- liapp 1
- libc 1
- libdxbase 1
- libgeiri 1
- libjiagu 1
- libsgmain 1
- libssl 1
- libunwindstack 1
- license-analysis 1
- license-file 1
- lief 1
- linker64 1
- linux 1
- live-streaming 1
- LLDB 1
- LLVM 1
- llvm-ir 1
- llvmlite 1
- loader 1
- localization 1
- logcat 1
- low-level 1
- lspatch 1
- lstar 1
- lstat 1
- lua 1
- mac-address 1
- mach-message 1
- mach-ool-message 1
- machineguid 1
- macos 1
- macOS 1
- man-in-the-middle 1
- MBA 1
- memory 1
- memory-access 1
- memory-layout 1
- memory-leak 1
- memory-scan 1
- message-hooking 1
- message-map 1
- message-revoke 1
- metasec 1
- methoddesc 1
- methodology 1
- MFC 1
- miasm 1
- microcode 1
- minhook 1
- mir4 1
- mirai 1
- mitm 1
- mmfndatabase 1
- mmpfn 1
- MmVerifyCallbackFunctionCheckFlags 1
- mobileprovision 1
- MobileSubstrate 1
- model-protection 1
- modified-AES 1
- MOF 1
- moments 1
- monitoring 1
- mprotect 1
- mremap 1
- mshookfunction 1
- msvc 1
- mtgsig 1
- multi-instance 1
- mutual-tls 1
- naga 1
- nativecallback 1
- nativefunction 1
- ndk 1
- netlink 1
- netlinker 1
- netty 1
- network-protocol 1
- night-crows 1
- nodejs 1
- NSProxy 1
- ntdll 1
- oat 1
- objc_msgsend 1
- object-callbacks 1
- objection 1
- obregistercallback 1
- ObRegisterCallbacks 1
- ObUnRegisterCallbacks 1
- oep 1
- office-2000 1
- onCreate 1
- onnx 1
- onnxruntime 1
- OSGi 1
- otool 1
- packers 1
- parameter-analysis 1
- patch 1
- patchguard 1
- pattern-matching 1
- payload-dumper 1
- pbkdf2 1
- pcode 1
- perf 1
- phoenixaes 1
- pixel 1
- pkcs7 1
- plc 1
- plugin 1
- pms 1
- Polaris 1
- policy 1
- preferenceloader 1
- process 1
- proot 1
- property-system 1
- protection 1
- protocol-reversal 1
- protocol-reversing 1
- proxy 1
- pthread 1
- pyd 1
- pymethoddef 1
- pyobject 1
- Python 1
- pytypeobject 1
- qiniu 1
- qr-code 1
- raid 1
- rc5 1
- red-packet 1
- registernatives 1
- relocator 1
- remote-call 1
- remote-thread 1
- repack 1
- resource-patching 1
- resource-rules 1
- ret 1
- retro-computing 1
- RGB-lighting 1
- rom 1
- rootfs 1
- rpc 1
- RtlCreateHeap 1
- RTTI 1
- rusda 1
- rwprocmem33 1
- s7commplus 1
- sandhook 1
- sc_info 1
- scada 1
- scoring-engine 1
- script-replacement 1
- scripting 1
- sd-parameter 1
- sdk 1
- security-sdk 1
- seed-recovery 1
- seh 1
- self-healing 1
- self-protection 1
- selinux 1
- serializer 1
- server-side 1
- service 1
- setthreadname 1
- setupapi 1
- sgmain 1
- SHA-512 1
- shadow 1
- shadowhook 1
- shadowrocket 1
- shell-smashing 1
- shellcode 1
- siemens 1
- sig3 1
- sign-algorithm 1
- signal-protocol 1
- signature-algorithm 1
- signature-bypass 1
- signature-check 1
- signature-verification 1
- signing 1
- simpleperf 1
- skpaymentqueue 1
- sm4 1
- smc 1
- snsuploadui 1
- so-dumping 1
- SO-hardening 1
- socket 1
- software-watermarking 1
- SOS 1
- source-insight 1
- spaceport 1
- spoofing 1
- springboard 1
- sqlite3 1
- srp6a 1
- ssl 1
- ssl-keylog 1
- sslkey 1
- stack-unwinding 1
- Stalker 1
- stat 1
- static-injection 1
- static-linked 1
- step-count 1
- storekit 1
- storport 1
- strcmp 1
- String 1
- strstr 1
- sub_xxxx 1
- substitution-cipher 1
- swift 1
- swift-demangle 1
- swift-runtime 1
- symbol-recovery 1
- symbol-table 1
- syscall-interception 1
- sysctl 1
- system-internals 1
- system-load 1
- system-properties 1
- system-server 1
- tee 1
- telemetry 1
- tfp0 1
- Themida 1
- threat-intel 1
- ticket-monitoring 1
- time-diff 1
- time-travel-debugging 1
- tooling 1
- traceless-hook 1
- tracerpid 1
- traffic-analysis 1
- traffic-decryption 1
- traffic-interception 1
- translation 1
- trustkit 1
- TTD 1
- ttencrypt 1
- ttEncrypt 1
- tutorial 1
- tweak 1
- ue4 1
- uefi 1
- uenum 1
- ufunction 1
- unicorn-engine 1
- unity 1
- unwind 1
- uobject 1
- uprobes 1
- uproperty 1
- USB 1
- use-after-free 1
- ustruct 1
- v8 1
- vbmeta 1
- vbr 1
- VEH 1
- verified-boot 1
- virtual-machine-protection 1
- virtualapp 1
- VM 1
- vpn 1
- warbird 1
- watchpoint 1
- web 1
- webassembly 1
- webview 1
- wechat-work 1
- wecom 1
- whatsapp 1
- white-box 1
- white-box-aes 1
- whitebox-crypto 1
- wibu 1
- wifi 1
- wifikit 1
- win64 1
- WinDbg 1
- windows-kernel 1
- winverifytrust 1
- wmi 1
- WMI 1
- xposed-detection 1
- xxtea 1
- zelix-klassmaster 1
- zkm 1
- zlldb 1
- zmq 1
- zygisknext 1