Hands-on workshop

Entry-P01NT

A hands-on workshop in reverse engineering and malware analysis, built around learning by doing. Eleven lessons that start from zero and end with practical labs you solve yourself.

11 Lessons 3 Stages 2 Practical labs

Start at 0x1 Repository on GitHub

Foundations

Stage 1 — Foundations

3 lessons

An entry into reverse engineering, its fundamentals, and how Windows is put together.

0x1 Introduction to Reverse Engineering 5 min read An entry point into reverse engineering and why it matters. 0x2 Fundamentals of Reverse Engineering 3 min read Curated references for building your reverse engineering fundamentals. 0x3 Windows Architecture & PE Format 12 min read How Windows is architected, and how it loads and runs programs.

Deep Dive

Stage 2 — Deep Dive

4 lessons

From source to machine code: program constructs, the attack path, reconnaissance, and tooling.

0x4 Recognizing C Code Constructs in Assembly 8 min read How C constructs - variables, loops, conditionals, switches, arrays, structs and linked lists - look in assembly. 0x5 Cyber Attack Lifecycle 4 min read Tracing the typical attack path and understanding the attacker's mindset. 0x6 Basic Reconnaissance 3 min read Initial triage skills and gathering information about an unknown binary. 0x7 RE Toolkit: Disassemblers & Debuggers 3 min read Setting up your working environment and toolchain: Ghidra, x64dbg and IDA.

Practice

Stage 3 — Practice

4 lessons

Hands-on labs for mindset, static and dynamic analysis — then where to go after the workshop.

0x8 The Reverse Engineer's Mindset 3 min read Building the reverse engineer's mindset and inferring hidden program logic. 0x9 Static Lab Lab 5 min read Analysing code without ever running it, all the way to recovering the flag. 0xA Dynamic Lab Lab 5 min read Observing a program while it executes, and defeating its anti-debugging checks. 0xB After That 2 min read How to keep growing in reverse engineering once the workshop is behind you.