Jump to content
Tuts 4 You

New to reversing , where do i start


Darkranger

Recommended Posts

Hi i am new to reversing ,have a few lena's tuts on my disk.When i saw her 1st & 2nd tutorial it was like i understood everything so well[because she explained well the logic] but when i start on my own to learn i get lost. Everything seems to be new,i get confused on assembly. So where do i start I start by coding simple apps in asm or

I start right away with debugging with olly or

I learn asm to depth and come back for debugging.

I want some insight on how you people all learned reversing

Thank you for anyone who answers.

Link to comment
SuperCRacker

There are lots of papers about assembly language, try first to understand well asm and then move to debugging with Olly. Lena series for newbies is very well made, so take profit of it. And also if you have some experience with a coding language (asm,c++,delphi,vb...) it will help you a lot understand what´s going on on the low level.

Well good luck !

SC.

Link to comment

thank you for the advice super cracker :D

Is 'Goppits Win asm for crackers' enough for learning asm from practical point of view

Link to comment

I didn't learn a lot of asm before i started reversing, and frankly reversing with lena is a great way to learn asm anyway. Actually I shouldn't say that. You learn what all the opcodes do, and you learn to think like a reverser, but it is different to program in asm. You think in a different way than most programming languages, but it is easy to convert assuming you know C or something similar, you just need a little practice.

Edited by Dooms_day
Link to comment

Actually, I started this to learn asm. When you start to understand the op code asm programming is easy. Reversing does get addicting fast though. Don't get discouraged, keep at it, everything is easier with someone guiding you through it. Lena's tutorials, as far as I am concerned are still the best place to start. True learning will happen when you start on your own project. Keep at it and it will start to make sense. I'd suggest try some simple CrackMe's / KeygenMe's from the CrackMe's / UnPackMe's / KeygenMe's section. The algo's are fairly easy to find, and it will / should help you learn without feeling to confused / discouraged.

Good luck

Link to comment

sure thanks for the head's up i already finished the first tut & have load's of questions to ask .shall i post them here in same thread or start a new one ?

Link to comment

My personal opinion is that it is not really a necessity to learn assembler first before attacking the newbie series.

In fact, the series was developed with the non-coder in mind. If you keep the sheet with assembler instructions - which was included with one of the first parts - at hand, and if you consult this sheet - and/or more extensive sources - every time a new instruction is encountered, then all will become clear gradually and hopefully without too much hassle.

Remark that of course it is far better if you have good assembler knowledge (and/or even from a HLL) first, but experience has learned that almost all give up otherwise: it is so much more fun if being able to achieve some results from the first part than ...

Then again, this is only my personal opinion :)

Success in your quest!

lena151.

PS Goppit's assembler tutorial is certainly commendible as a next step after the series since it will guide you through some pretty important matters as well.

Edited by lena151
Link to comment

Well I just learned it on the way, what's better than to just see what an opcode does by executing it.

Ecxept for opcodes like bt etc I simply deduced the other ones. Then eventually when reversed enough you can just code it. Just need to review the API structures and that's all.

Okay you code a bit ****ey olly style but it'll compile fine. :D

Link to comment

hey finished my first tut with lotta understanding, thanks to Lena

just some doubt's could some one clear me with this,

1. During the tuts some portion had surface overview of Ring3,Ring0 .Actually how many Ring does a windows os/shell has 3,2 ? what is the significance of it in view of a reverser.

2.Olly stops execution by putting 'INT CC' before first statement. Does this mean ,is this the same way Visual Studio & other IDE breakpoints work[stopping the execution before the breakpoint]

3.In a reverseme,crackme & keygen me. Is it always manipulation with data that occurs ? i.e. do the instructions actually alter the address or just the data within a address.

Link to comment

My personal opinion is that it is not really a necessity to learn assembler first before attacking the newbie series.

In fact, the series was developed with the non-coder in mind.

lena151

sure Lena, you also emphasized the point through your tutorials many a times

Link to comment

Well I just learned it on the way, what's better than to just see what an opcode does by executing it.

Even ricardo navRaja's assembly tutorials teach the same way man.Execute a instruction and then explain what happened to them

Link to comment

I wouldn't really say I know that much ASM because all I write is exploitation shellcode, which you need more knowledge of the OS itself and only basic ASM opcodes and commands, I guess that helped me cruise through the basic tutorials, as I knew what the registers are and how calls and returns work, and of course the stack and heap...which lena teaches you anyway.

Overall verdict: if you don't know it already you will definitely learn on the way

Link to comment
  • 2 months later...

In the 3rd Tutorial on Oops!! Register me and Remove Nags by Lena ,Lena explained that she will discuss about the tool that will find the right values for all the variables and section values. Can i know the name of the tool that is used ?

Link to comment
  • 1 month later...
  • 4 weeks later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...