# Reverse Engineering Tutorials | Easy For Newbies!

**URL:** <https://onehack.st/t/reverse-engineering-tutorials-easy-for-newbies/181589>\
**Category:** Tutorials & Methods\
**Tags:** tips-tricks\
**Created:** [May 4, 2021, 9:46pm UTC](https://onehack.st/t/reverse-engineering-tutorials-easy-for-newbies/181589 "2021-05-04T21:46:46Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![BlueHacker](https://onehack.st/user_avatar/onehack.st/bluehacker/32/174721_2.png) [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Post date:** [May 4, 2021, 9:46pm UTC](https://onehack.st/t/reverse-engineering-tutorials-easy-for-newbies/181589/1 "2021-05-04T21:46:46Z")

</div>

So you want to be a Reverser? This is the best tutorial with the best tools ever coupled!!

_ **What is Reverse Engineering?** _

- Reverse engineering, also called back engineering, is the processes of extracting knowledge or design information from anything man-made and re-producing it or reproducing anything based on the extracted information. Thanks Wikipedia

So here we go:

**Tutorials**

**What it contains?**

1. Olly + assembler + patching a basic reverseme

2. Keyfiling the reverseme + assembler

3. Basic nag removal + header problems

4. Basic + aesthetic patching

5. Comparing on changes in cond jumps, animate over/in, breakpoints

6. “The plain stupid patching method”, searching for textstrings

7. Intermediate level patching, Kanal in PEiD

8. Debugging with W32Dasm, RVA, VA and offset, using LordPE as a hexeditor

9. Explaining the Visual Basic concept, introduction to SmartCheck and configuration

10. Continued reversing techniques in VB, use of decompilers and a basic anti-anti-trick

11. Intermediate patching using Olly’s “pane window”

12. Guiding a program by multiple patching.

13. The use of API’s in software, avoiding doublechecking tricks

14. More difficult schemes and an introduction to inline patching

15. How to study behaviour in the code, continued inlining using a pointer

16. Reversing using resources

17. Insights and practice in basic (self)keygenning

18. Diversion code, encryption/decryption, selfmodifying code and polymorphism

19. Debugger detected and anti-anti-techniques

20. Packers and protectors : an introduction

21. Imports rebuilding

22. API Redirection

23. Stolen bytes

24. Patching at runtime using loaders from lena151 original

25. Continued patching at runtime & unpacking armadillo standard protection

26. Machine specific loaders, unpacking & debugging armadillo

27. tElock + advanced patching

28. Bypassing & killing server checks

29. Killing & inlining a more difficult server check

30. SFX, Run Trace & more advanced string searching

31. Delphi in Olly & DeDe

32. Author tricks, HIEW & approaches in inline patching

33. The FPU, integrity checks & loader versus patcher

34. Reversing techniques in packed software & a S&R loader for ASProtect

35. Inlining inside polymorphic code

36. Keygenning \<— (This one i liked the most)

37. In-depth unpacking & anti-anti-debugging a combination packer / protector

38. Unpacking continued & debugger detection by DLL’s and TLS

39. Inlining a blowfish scheme in a packed & CRC protected dll

40. Tools

> While I’m sure that some of these are outdated, it should at least give you a headstart (by pointing you in the right direction). That doesn’t mean, however, that they are ALL outdated.

**Happy learning**

---

<div class="post-metadata">

**Author:** ![1tonpun](https://onehack.st/user_avatar/onehack.st/1tonpun/32/44483_2.png) [@1tonpun](https://onehack.st/u/1tonpun)\
**Post date:** [May 6, 2021, 3:17am UTC](https://onehack.st/t/reverse-engineering-tutorials-easy-for-newbies/181589/2 "2021-05-06T03:17:54Z")

</div>

Where is the link?

---

<div class="post-metadata">

**Author:** ![asa16](https://onehack.st/user_avatar/onehack.st/asa16/32/75754_2.png) [@asa16](https://onehack.st/u/asa16)\
**Post date:** [May 6, 2021, 5:26am UTC](https://onehack.st/t/reverse-engineering-tutorials-easy-for-newbies/181589/3 "2021-05-06T05:26:14Z")

</div>

where’s the link?

---

<div class="post-metadata">

**Author:** ![Singh\_Ji](https://onehack.st/user_avatar/onehack.st/singh_ji/32/87558_2.png) [@Singh\_Ji](https://onehack.st/u/Singh_Ji)\
**Post date:** [May 6, 2021, 2:22pm UTC](https://onehack.st/t/reverse-engineering-tutorials-easy-for-newbies/181589/4 "2021-05-06T14:22:55Z")

</div>

> [@BlueHacker](#):
>
> i

I think link is missing !!!

---

<div class="post-metadata">

**Author:** ![Aina](https://onehack.st/user_avatar/onehack.st/aina/32/167469_2.png) [@Aina](https://onehack.st/u/Aina)\
**Post date:** [May 6, 2021, 2:49pm UTC](https://onehack.st/t/reverse-engineering-tutorials-easy-for-newbies/181589/5 "2021-05-06T14:49:45Z")

</div>

> [@Singh\_Ji](#):
>
> link is missing !!!

> [@asa16](#):
>
> the link?

> [@1tonpun](#):
>
> the link?

## Here you Go:

[Download](https://www.mediafire.com/download/y4lqw2ywc7opm57/%5Brenhoax%5Dsnd-reversingwithlena-tutorials.rar) \<— 140Mb

(Click and save, no redirection)

OP just forgot to mention the link (Excuses), as far my concern, I know from where they get it, So I simply found it on my own! Cheers

## Missing Part Of This Tutorial: Here Is The Remaining Section:

> **Tools**
> 
> Signature Scanners:  
> PEiD - [http://bob.droppages.com/Projects/PEiD](http://bob.droppages.com/Projects/PEiD)
> 
> API Loggers:
> 
> API Monitor - [http://www.rohitab.com/apimonitor](http://www.rohitab.com/apimonitor))  
> WinAPIOverride - [http://jacquelin.potier.free.fr/index.php](http://jacquelin.potier.free.fr/index.php)  
> Process Monitor - [http://technet.microsoft.com/en-us/sysin...s/bb896645](http://technet.microsoft.com/en-us/sysin...s/bb896645)
> 
> Debuggers/Disassemblers:
> 
> OllyDbg - [http://www.ollydbg.de/](http://www.ollydbg.de/)  
> IDA Pro - [https://www.hex-rays.com/products/ida/index.shtml](https://www.hex-rays.com/products/ida/index.shtml)  
> WinDBG - [http://msdn.microsoft.com/en-us/windows/...e/hh852365](http://msdn.microsoft.com/en-us/windows/...e/hh852365)  
> W32DASM - [https://tuts4you.com/download.php?view.1138](https://tuts4you.com/download.php?view.1138)
> 
> Decompilers:
> 
> .NET
> 
> .NET Reflector - [http://www.red-gate.com/products/dotnet-...reflector/](http://www.red-gate.com/products/dotnet-...reflector/)  
> dotPeek - [http://www.jetbrains.com/decompiler/](http://www.jetbrains.com/decompiler/)  
> Telerik JustDecompile - [http://www.telerik.com/products/decompiler.aspx](http://www.telerik.com/products/decompiler.aspx)  
> ILSpy - [http://ilspy.net/](http://ilspy.net/)  
> VB 6
> 
> VB Decompiler - [http://www.vb-decompiler.org/](http://www.vb-decompiler.org/)  
> Delphi
> 
> DeDe - [http://www.softpedia.com/get/Programming...DeDe.shtml](http://www.softpedia.com/get/Programming...DeDe.shtml)  
> C
> 
> Boomerang - [http://boomerang.sourceforge.net/](http://boomerang.sourceforge.net/)  
> Automated Analysis:
> 
> Offline  
> SysAnalyzer - [http://www.woodmann.com/collaborative/to...ysAnalyzer](http://www.woodmann.com/collaborative/to...ysAnalyzer)
> 
> Online  
> Anubis - [http://anubis.iseclab.org/](http://anubis.iseclab.org/)  
> ThreatExpert - [http://www.threatexpert.com/filescan.aspx](http://www.threatexpert.com/filescan.aspx)  
> GFI Sandboxâ„¢ (formerly CWSandbox)
> 
> Virtual Machines/Sandboxes:
> 
> VMware Workstation - [http://www.vmware.com/products/workstation](http://www.vmware.com/products/workstation)  
> Sandboxie - [http://www.sandboxie.com/](http://www.sandboxie.com/)
> 
> Packet Sniffers:
> 
> Wireshark - [https://www.wireshark.org/](https://www.wireshark.org/)  
> TCPView - [http://technet.microsoft.com/en-us/sysin...97437.aspx](http://technet.microsoft.com/en-us/sysin...97437.aspx)
> 
> PE Editors:
> 
> CFF Explorer - [http://ntcore.com/exsuite.php](http://ntcore.com/exsuite.php)  
> PEditor - [http://www.softpedia.com/get/Programming...itor.shtml](http://www.softpedia.com/get/Programming...itor.shtml)
> 
> Hex Editors:
> 
> HxD - [http://mh-nexus.de/en/hxd/](http://mh-nexus.de/en/hxd/)  
> HexEdit - [http://www.hexedit.com/](http://www.hexedit.com/)
> 
> Misc:
> 
> Sysinternals Suite - [http://technet.microsoft.com/en-us/sysin...42062.aspx](http://technet.microsoft.com/en-us/sysin...42062.aspx)  
> Hex Calculator - [http://www.hexprobe.com/hpmbcalc/index.htm](http://www.hexprobe.com/hpmbcalc/index.htm)  
> Process Explorer - [http://technet.microsoft.com/en-us/sysin...96653.aspx](http://technet.microsoft.com/en-us/sysin...96653.aspx)

> While I’m sure that some of these are outdated, it should at least give you a headstart (by pointing you in the right direction). That doesn’t mean, however, that they are ALL outdated.

## ENJOY! ❤
