I will be mirroring this repository onto my website, https://www.debugxp.com/posts/RECourse. This repository will still be updated, however, I belive the website offers a better experience.
The website is a GitHub pages site hosted with CloudFlare. This is the link to the GitHub pages site repository: https://github.com/0xZ0F/0xZ0F.github.io
This course aims to take an individual from beginner to intermediate (advanced is really only achieved through experience) in reverse engineering. While this course focuses on Windows 64-bit, the technical knowledge applies to 32-bit Windows and the theory to any OS.
The choice has been made for 64-bit Windows since it's modern and the most common OS and architecture. In addition, we only have to deal with one calling convention.
For a more interactive experience with the initial portion of the course (chapters 1 through 6), try out the course on TryHackMe:
There are some PDFs created and provided in ZIP files. They may not be up to date, so it's recommended to follow the normal markdown version of the course. The PDFs were provided due to a high number of requests for them.
The password for the ZIP files is "reverse" (without the quotes).
- Please take a moment to read BeforeYouBegin.
- Join the Discord server: https://discord.gg/73tkPGv
- Use the Discord server to ask for help and stay updated with the course!
This course is going to teach anyone how to reverse engineer x64 Windows. We will start by covering some basics of binaries, then reverse some small samples, reverse a DLL and implement it into our own program, reverse some malware, then look at some realistic situations.
The goal is not to teach you how to smash your head against assembly. Rather, I want to teach how to use tools to enhance your skills and capabilities. For example, we will cover how to log function calls for easier analysis using a debugger or writing our own code for more control.
Reversing is made so much harder because of the lack of resources to learn it. Most content is outdated, overpriced, hard to follow, or low quality. Reversing is already considered by many to be a difficult field to get into. Something being difficult isn't an issue, but when it gets needlessly difficult there is an issue. After reading multiple books, countless blog posts, extensive documentation, following multiple YouTube "tutorials", and much more, I feel like it's time for someone to make a dedicated course. I don't think it should be that hard to learn one topic. I certainly don't want people to have to go through the mess I went through, so I decided to make this course. I love this field and I wanted to give back to the community. Here's my gift to you and the rest of the community. Hopefully there are a few people out there that this course can help.
Follow me on Twitter @0xZ0F!
Discord Server: https://discord.gg/73tkPGv
Please give me any and all honest feedback you have. Don't worry about hurting my feelings, I want to make this course as good as I can. I can't do that alone, that's why your feedback is so important.
The best way to stay up-to-date is to support me on Patreon which will give you access to the Patreon-only feed. The feed includes the latest updates, upcoming updates, and more.
-
Chapter 7 - Windows - WIP