Tagged articles

binary analysis

19 articles · Page 1 of 1

Jul 25, 2026 · Information Security

Deep Dive into wp2shell: A Cross‑Platform RAT Attack Platform

Security researchers monitoring an open directory uncovered the full wp2shell platform, a cross‑platform Go RAT supporting 14 CPU architectures that combines a zero‑credential WordPress exploit chain with large‑scale IoT botnet deployments against Ubiquiti, D‑Link and Totolink devices, featuring fileless execution, post‑quantum TLS, and extensive persistence mechanisms.

IoT botnetMITRE ATT&CKRAT

0 likes · 32 min read

Deep Dive into wp2shell: A Cross‑Platform RAT Attack Platform

Black & White Path

Jul 22, 2026 · Information Security

How swift-section Extracts Private iOS Swift Interfaces from Mach‑O Binaries

The swift-section tool reads __swift5_ sections in iOS Mach‑O binaries, parses Swift ABI metadata, demangles symbols, and generates a complete Swift interface file, revealing private framework designs such as DesignLibrary without accessing source code, a valuable capability for security researchers.

Mach-OReverse EngineeringSwift ABI

0 likes · 4 min read

How swift-section Extracts Private iOS Swift Interfaces from Mach‑O Binaries

Black & White Path

May 24, 2026 · Information Security

Oxidizer: The First Rust Decompiler Integrated into angr, Presented at IEEE S&P 2026

When traditional decompilers output unintelligible C‑style code for Rust binaries, Oxidizer restores Rust‑specific structures, enums and macros, achieving up to 28% higher accuracy and 20% faster analysis, as demonstrated on 28 popular Rust projects and validated in user studies.

Malware AnalysisReverse EngineeringRust

0 likes · 7 min read

Oxidizer: The First Rust Decompiler Integrated into angr, Presented at IEEE S&P 2026

Liangxu Linux

Jun 17, 2025 · Fundamentals

Demystifying ELF: How Linux Turns a Binary into a Running Process

This article explains the ELF (Executable and Linkable Format) file structure, how to identify ELF binaries, the roles of headers, program and section tables, the compilation‑to‑execution lifecycle, and practical tools for inspecting and manipulating ELF files on Linux.

Dynamic LinkingELFExecutable Format

0 likes · 20 min read

Demystifying ELF: How Linux Turns a Binary into a Running Process

Open Source Linux

Oct 16, 2024 · Fundamentals

Decoding Windows Minidump Files: Inside the Crash Dump Structure

This article explains how Windows minidump files are structured, detailing the header and key streams such as ThreadListStream, ModuleListStream, ExceptionStream, SystemInfoStream, and MiscInfoStream, and shows how this information helps pinpoint the exact cause of a program crash.

DebuggingWindowsbinary analysis

0 likes · 7 min read

Decoding Windows Minidump Files: Inside the Crash Dump Structure

Liangxu Linux

Jan 22, 2024 · Information Security

Reassemble a Split EXE and Crack Its License Check to Reveal the Flag

This guide walks you through rebuilding a fragmented EXE file, fixing a hidden byte error, analyzing its PE structure with IDA, and three ways to bypass the license check—by writing a DLL, patching the binary, or directly decoding the hidden flag.

CTFIDAPE format

0 likes · 11 min read

Reassemble a Split EXE and Crack Its License Check to Reveal the Flag

Baidu Geek Talk

Jun 5, 2023 · Mobile Development

Mach-O File Analysis and Resource Optimization for Baidu iOS App

The article explains how Baidu’s iOS app reduces package size by examining Mach‑O binaries with tools like otool and MachOView, then applying Python scripts to locate oversized assets, eliminate unused configuration files, and deduplicate resources, achieving a 12 MB reduction and a repeatable optimization pipeline.

Mach-OResource Optimizationbinary analysis

0 likes · 18 min read

Mach-O File Analysis and Resource Optimization for Baidu iOS App

HomeTech

Aug 11, 2022 · Fundamentals

Mach-O File Format: Dynamic and Static Library Attribution and API Scanning Solutions

This article introduces the Mach-O executable format, explains how its structure can be leveraged to attribute dynamic and static libraries at runtime and during build, and presents two practical projects—library attribution and fast API scanning—complete with implementation details and code snippets.

API scanningMach-OReverse Engineering

0 likes · 15 min read

Mach-O File Format: Dynamic and Static Library Attribution and API Scanning Solutions

ByteDance Terminal Technology

May 11, 2022 · Fundamentals

Common Misconceptions in iOS15 Dynamic Linking and Mach‑O Fixup Chains

This article clarifies three frequent misunderstandings about iOS15+ dynamic linking—namely the encoding of b/bl instructions, the need for rebase/bind in __TEXT segments, and the mismatch between Mach‑O segment VM size and file size—by explaining the underlying ARM64 architecture, PIC concepts, and providing concrete dyld tool examples.

AssemblyDynamic LinkingMach-O

0 likes · 11 min read

Common Misconceptions in iOS15 Dynamic Linking and Mach‑O Fixup Chains

Liangxu Linux

Apr 18, 2022 · Fundamentals

Unlocking ELF: A Deep Dive into Linux Executable File Structure

This article provides a comprehensive, byte‑level walkthrough of the ELF file format on Linux, explaining headers, sections, program headers, string tables, and how linkers and loaders interpret each part using tools like readelf and od.

ELFExecutable Formatbinary analysis

0 likes · 18 min read

Unlocking ELF: A Deep Dive into Linux Executable File Structure

Open Source Linux

Nov 7, 2021 · Operations

Master Linux Binary Analysis: Essential Tools for Debugging and Profiling

This guide presents a comprehensive overview of Linux binary analysis and debugging tools—including nm, strings, strip, readelf, objdump, addr2line, gdb, ldd, strace, ltrace, time, gprof, valgrind, mtrace, oprofile, the proc filesystem and common system logs—explaining their purposes, key options, and typical usage patterns for both compilation and runtime phases.

DebuggingLinuxbinary analysis

0 likes · 16 min read

Master Linux Binary Analysis: Essential Tools for Debugging and Profiling

58 Tech

Oct 28, 2021 · Mobile Development

Detecting Unused Code in Mixed Swift and Objective‑C iOS Projects via Mach‑O Analysis

This article explains how to detect and remove unused code in mixed Swift and Objective‑C iOS applications by parsing Mach‑O files, analyzing class metadata, and leveraging AccessFunction calls, while discussing the challenges, implementation details of the WBBlades tool, and practical usage steps.

Mach-OObjective‑CSwift

0 likes · 15 min read

Detecting Unused Code in Mixed Swift and Objective‑C iOS Projects via Mach‑O Analysis

Sohu Tech Products

Jul 7, 2021 · Mobile Development

Analyzing Mach-O Files with Otool to Identify Unused Classes and Methods in iOS Apps

This article explains how to use the otool command to parse Mach-O sections, extract __objc_classlist and __objc_classrefs, compute their differences, and locate unused Objective‑C classes and methods for iOS app size optimization, providing sample Objective‑C code and detailed implementation steps.

Mach-Obinary analysisiOS

0 likes · 22 min read

Analyzing Mach-O Files with Otool to Identify Unused Classes and Methods in iOS Apps

ITPUB

Jan 14, 2021 · Fundamentals

Uncovering Swift’s Binary Layout: From Dynamic Calls to Mach‑O Class Structures

This article explores Swift’s binary representation by comparing it with Objective‑C, demonstrating runtime dynamic method invocation, dissecting Mach‑O sections such as __objc_classlist and __swift5_types, and revealing how Swift classes store their metadata and VTables.

Dynamic InvocationMach-OObjective‑C

0 likes · 16 min read

Uncovering Swift’s Binary Layout: From Dynamic Calls to Mach‑O Class Structures

Youzan Coder

Jan 8, 2021 · Frontend Development

File Upload Techniques: From Basic Validation to Advanced Resumable Uploads

This article surveys web file‑upload strategies, from basic Blob/File handling and pre‑upload validation—including MIME, extension, and binary header checks—to advanced techniques such as chunked transfers, progress tracking, resumable uploads with pause/resume, and optional compression or encryption via CDN services.

Chunked UploadFormDataResumable Upload

0 likes · 20 min read

File Upload Techniques: From Basic Validation to Advanced Resumable Uploads

Sohu Tech Products

Dec 9, 2020 · Fundamentals

Instrumenting iOS SDKs with LLVM and SanitizerCoverage for BasicBlock‑Level Code Coverage

This article explains how to use LLVM and SanitizerCoverage to insert BasicBlock‑level instrumentation into iOS binaries such as the WeChat SDK, covering the theory of code‑coverage metrics, compilation steps, bitcode extraction, and a practical demo that visualizes runtime execution paths.

BasicBlockLLVMSDK instrumentation

0 likes · 17 min read

Instrumenting iOS SDKs with LLVM and SanitizerCoverage for BasicBlock‑Level Code Coverage

Liangxu Linux

Jul 27, 2020 · Operations

Essential Linux Tools for Binary Analysis, Debugging, and Performance Profiling

This guide outlines key Linux utilities for inspecting binaries during compilation (nm, strings, strip, readelf, objdump, addr2line) and for runtime debugging and profiling (gdb, ldd, strace, ltrace, time, gprof, valgrind, mtrace, oprofile), plus an overview of the proc filesystem and common system logs.

LinuxProc Filesystembinary analysis

0 likes · 17 min read

Essential Linux Tools for Binary Analysis, Debugging, and Performance Profiling

Liangxu Linux

May 14, 2020 · Information Security

Master Linux Binary Analysis: 10 Essential Commands Explained

This guide introduces ten fundamental Linux commands—file, ldd, ltrace, strace, hexdump, strings, readelf, objdump, nm, and gdb—explaining how each tool reveals a binary's type, dependencies, function calls, raw bytes, symbols, and runtime behavior for effective reverse‑engineering and debugging.

Reverse Engineeringbinary analysisfile command

0 likes · 14 min read

Master Linux Binary Analysis: 10 Essential Commands Explained

JD Tech

Aug 9, 2018 · Information Security

CTF AI Challenge Solution Report: Analyzing and Improving a Keras Model for Function Entry Detection

This report details the analysis of a JD security CTF challenge that uses a Keras deep‑learning model to detect function entry points in binary code, describing the environment, manual data processing, model inspection, training adjustments, and optimization steps to achieve correct detection.

CTFKerasReverse Engineering

0 likes · 7 min read

CTF AI Challenge Solution Report: Analyzing and Improving a Keras Model for Function Entry Detection