Foundations

Your first reversing tool

40 min

Reverse engineering means working out what a program does without its source code.

Easy first steps

  • file prog tells you what kind of file it is
  • strings prog prints readable text inside it, often useful hints
  • A decompiler such as Ghidra turns machine code back into code you can read

Try it

Run strings on a small program and read the output. Then open the same program in Ghidra, find the main function and read what it compares your input against.