Skip to content

marcusbotacin/Reverse.Engineering.Engine

master
Switch branches/tags
Code

Latest commit

 

Git stats

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
 
 
 
 
 
 
 
 
src
 
 
 
 
 
 
 
 
 
 
 
 

RevEngE

Additional Material for the RevEngE (Reverse Engineering Engine) paper.

Authors

RevEngE was developed by Marcus Botacin and Lucas Galante, under supervision of Paulo de Geus and André Grégio.

Motivation

Explore debugging extensions and malware decompilation capabilities based on dynamic GDB debugging sessions.

Repository Organization

  • bins: Stores decompiled binary files.
  • sources: Stores decompiled source files.
  • src: Stores RevEngE's introspection routines (optional).
  • tests: Stores RevEngE's test-case files.
  • paper: Contains the white-paper.

Instalation

Source your GDB: (Notice: It might install packages to your system!!!)

source install.sh

Compile test files:

chmod +x tests/compile_tests.sh
./tests/compile_tests.sh

Basic Usage

Test functionalities:

$ gdb <binary>
(gdb) revtest

Usage Examples

Upon starting RevEngE, you should see this screen:

A

If you need help to learn new commands, just type:

A

You can perform a fully automated execution and decompilation analysis by typing:

A

Publications

  • The paper RevEngE is a dish served cold: Debug-Oriented Malware Decompilation and Reassembly was published in the Reversing and Offensive-oriented Trends Symposium 2019 (ROOTS). Check Here
  • The slides for the ROOTS paper are available in this repository. Check Here
  • The paper Extensões de Engenharia Reversa para o GDB was published in the XIX SBSEG. Check Here

About

Additional Material for the RevEngE paper

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published