B4: Exploit Development, RE & Malware Analysis
Reverse Engineering Workflow
Static and dynamic analysis with strings, symbols, control flow, debuggers, and decompilers.
- Triage: file type, architecture, hashes, strings, imports, sections, entropy, and obvious packers.
- Static map: functions, control flow, cross-references, key constants, and data structures.
- Dynamic observation: run in a safe lab, trace files, registry, network, child processes, and exceptions.
- Debug critical paths: breakpoints around parsing, crypto, authentication checks, and dangerous APIs.
- Document findings: purpose, inputs, outputs, trust boundaries, and likely vulnerability points.