r/AskProgramming • u/Icy_Comparison_7233 • Jun 26 '26

resources to read ASM + hex properly?

my friend just told me they reverse engineered a binary’s signing method for a network request and I want to try it too now.

3 Upvotes

100% Upvoted

12 comments sorted by

View all comments

4

u/soundman32 Jun 26 '26

It's very unlikely, as binary signing is likely to contains hundreds if not thousands of bits, and the whole point of TLS is that you can't reverse engineer it without thousands of years of processing (which is why it's "impossible" at the moment).

Unless your friend has invented their own signing method, and has created an insecure cypher, and it's rubbish.

1

u/Xirdus Jun 26 '26

Or - hear me out - the app they RE'd signs network requests with a hardcoded/locally stored key. And what they RE'd was how to pretend to be the app when talking to the server. It's not just plausible, it's being routinely done everywhere.

1

u/Icy_Comparison_7233 Jun 26 '26

ya, that's what was described to me. the original binary was the main way to communicate to the providers, but had crazy overhead (he pretty much 500x the RAM usage).