Gh0stByte/Z0FCourse_ReverseEngineering

Reverse engineering focusing on x64 Windows.

ATTENTION:

This course is still in early development. I plan on adding a significant amount of content. For now, this course is going to be hosted here on Github, however, that will most likely change in the future. To stay updated, follow me on Twitter.

Message about my future and the future of the reverse engineering course: https://0xz0f.github.io/Blog/Updates/03222020.html

This course is a side project, so updates may be slow. The course is free, and it will remain that way, so don't expect me to spend countless hours working on it. Thank you.

Read BeforeYouBegin

• Join the new Discord server: https://discord.gg/73tkPGv
• Support me on Patreon!

What We'll Do/Learn:

This course is going to teach anyone how to reverse engineer x64 Windows. We will start by covering some basics of binaries, then reverse some small samples, reverse a DLL and implement it into our own program, reverse some malware, then look at some realistic situations.

Table Of Contents

Why I Made This Course

Reversing is made so much harder because of the lack of resources to learn it. Most content is outdated, overpriced, hard to follow, or low quality. Reversing is already considered by many to be a difficult field to get into. Something being difficult isn't an issue, but when it gets needlessly difficult there is an issue. After reading multiple books, countless blog posts, extensive documentation, following multiple YouTube "tutorials", and much more, I feel like it's time for someone to make a dedicated course. I don't think it should be that hard to learn one topic. I certainly don't want people to have to go through the mess I went through, so I decided to make this course. I love this field and I wanted to give back to the community. Here's my gift to you and the rest of the community. Hopefully there are a few people out there that this course can help.

Contact/Stay Updated:

Follow me on Twitter @0xZ0F!
Discord Server: https://discord.gg/73tkPGv
Become a Patreon supporter!

Please give me any and all honest feedback you have. Don't worry about hurting my feelings, I want to make this course as good as I can. I can't do that alone, that's why your feedback is so important.

The best way to stay up-to-date is to support me on Patreon which will give you access to the Patreon-only feed. The feed includes the latest updates, upcoming updates, and more.

Table Of Contents:

• License

• Contributing

• Credit

• FAQ

• Lingo

• Readme

• @BeforeYouBegin

• TableOfContents

• Documentation

  • DOC
  • Plan
  • TODO

• Files Needed

  • Files Needed
  • Chapter 6 - DLL
  • Chapter WIP - Malware

• Chapter 1 - Introduction

  • 1.0 Introduction
  • 1.1 HowTo
  • 1.2 Setup

• Chapter 2 - BinaryBasics

  • 2.0 BinaryBasics
  • 2.1 NumberSystems
  • 2.2 ASCII
  • 2.3 BitsAndBytes
  • 2.4 ProgrammingLanguages
  • 2.5 Bitwise Operations
  • 2.6 Mindset

• Chapter 3 - Assembly

  • 3.0 Assembly
  • 3.1 Registers
  • 3.2 MemoryLayout
  • 3.3 Instructions
  • 3.4 Flags
  • 3.5 CallingConventions
  • 3.6 FinalNotes

• Chapter 4 - Tools

  • 4.0 Tools
  • 4.1 ToolTypes
  • 4.2 Debugging
  • 4.3 ToolGuides

• Chapter 5 - Basic Reversing

  • 5.0 BasicReversing
  • 5.1 BeforeWeBegin
  • 5.2 FunctionCall
  • 5.3 HelloWorld
  • 5.4 Loops

• Chapter 6 - DLL

  • 6.00 DLL
  • 6.01 BeforeWeBegin
  • 6.02 DLLBasics
  • 6.03 Exports
  • 6.04 SayHello
  • 6.05 PrintArray
  • 6.06 InitializePlayer
  • 6.07 PrintPlayerStats
  • 6.08 MysteryFunc
  • 6.09 ImplementingPlayer
  • 6.10 FinalNotes

• Chapter 7 - Windows - WIP

  • 7.0 Windows
  • 7.1 Virtual Memory
  • 7.2 Privileges
  • 7.3 Architecture - WIP

• Chapter 8 - Generic Table - WIP

  • 8.00 Generic Table
  • 8.01 InitializeTable
  • 8.02 NumberGenericTableElements.md
  • 8.03 IsGenericTableEmpty.md
  • 8.04 GetElement