knipundananjaya / z0fcourse_reverseengineering

Reverse engineering focusing on x64 Windows.

Moving Course:

Fantastic news, the reverse engineering course is officially moving to TryHackMe! It's going to be fairly slow, but I can't wait for it! The best part is it's going to be way more interactive. You'll have samples and tools provided, and you'll be able to follow along with the course. Thank you all for your support even in the current time where updates are sparse. I promise you all it's going to be great <3

Check my profile for the rooms I create, because there's a review process it's probably going to be a bit. I'll update this message when the first room is out!

https://tryhackme.com/p/Z0F

Read BeforeYouBegin

• Join the new Discord server: https://discord.gg/73tkPGv
• Support me on Patreon!

What We'll Do/Learn:

This course is going to teach anyone how to reverse engineer x64 Windows. We will start by covering some basics of binaries, then reverse some small samples, reverse a DLL and implement it into our own program, reverse some malware, then look at some realistic situations.

Table Of Contents

Why I Made This Course

Reversing is made so much harder because of the lack of resources to learn it. Most content is outdated, overpriced, hard to follow, or low quality. Reversing is already considered by many to be a difficult field to get into. Something being difficult isn't an issue, but when it gets needlessly difficult there is an issue. After reading multiple books, countless blog posts, extensive documentation, following multiple YouTube "tutorials", and much more, I feel like it's time for someone to make a dedicated course. I don't think it should be that hard to learn one topic. I certainly don't want people to have to go through the mess I went through, so I decided to make this course. I love this field and I wanted to give back to the community. Here's my gift to you and the rest of the community. Hopefully there are a few people out there that this course can help.

Contact/Stay Updated:

Follow me on Twitter @0xZ0F!
Discord Server: https://discord.gg/73tkPGv
Become a Patreon supporter!

Please give me any and all honest feedback you have. Don't worry about hurting my feelings, I want to make this course as good as I can. I can't do that alone, that's why your feedback is so important.

The best way to stay up-to-date is to support me on Patreon which will give you access to the Patreon-only feed. The feed includes the latest updates, upcoming updates, and more.

Table Of Contents:

• License

• Contributing

• Credit

• FAQ

• Lingo

• Readme

• @BeforeYouBegin

• TableOfContents

• Documentation

  • DOC
  • Plan
  • TODO

• Files Needed

  • Files Needed
  • Chapter 6 - DLL
  • Chapter WIP - Malware

• Chapter 1 - Introduction

  • 1.0 Introduction
  • 1.1 HowTo
  • 1.2 Setup

• Chapter 2 - BinaryBasics

  • 2.0 BinaryBasics
  • 2.1 NumberSystems
  • 2.2 ASCII
  • 2.3 BitsAndBytes
  • 2.4 ProgrammingLanguages
  • 2.5 Bitwise Operations
  • 2.6 Mindset

• Chapter 3 - Assembly

  • 3.0 Assembly
  • 3.1 Registers
  • 3.2 MemoryLayout
  • 3.3 Instructions
  • 3.4 Flags
  • 3.5 CallingConventions
  • 3.6 FinalNotes

• Chapter 4 - Tools

  • 4.0 Tools
  • 4.1 ToolTypes
  • 4.2 Debugging
  • 4.3 ToolGuides

• Chapter 5 - Basic Reversing

  • 5.0 BasicReversing
  • 5.1 BeforeWeBegin
  • 5.2 FunctionCall
  • 5.3 HelloWorld
  • 5.4 Loops

• Chapter 6 - DLL

  • 6.00 DLL
  • 6.01 BeforeWeBegin
  • 6.02 DLLBasics
  • 6.03 Exports
  • 6.04 SayHello
  • 6.05 PrintArray
  • 6.06 InitializePlayer
  • 6.07 PrintPlayerStats
  • 6.08 MysteryFunc
  • 6.09 ImplementingPlayer
  • 6.10 FinalNotes

• Chapter 7 - Windows - WIP

  • 7.0 Windows
  • 7.1 Virtual Memory
  • 7.2 Privileges
  • 7.3 Architecture - WIP

• Chapter 8 - Generic Table - WIP

  • 8.00 Generic Table
  • 8.01 InitializeTable
  • 8.02 NumberGenericTableElements.md
  • 8.03 IsGenericTableEmpty.md
  • 8.04 GetElement