Learning resource
Reverse Engineering Reading List
A short reading list, compiled by One Thawt mostly in 2015–2016, of about 58 links to reverse-engineering tools, books, papers, talks and blog posts, kept in a README and a separate malware-analysis page. Sections run from disassemblers and debuggers, beginner talks and classic books through data-structure recovery papers, instruction-set references, iOS, Android and Windows material, unpacking, deobfuscation and protocol inference from network traces.
Requirements & limits
- Reviewed at commit a1ee767 (2023-05-02). 46 of 53 commits date from 2015–2016; the last added entries are x64dbg (2017), Binary Ninja (2018) and Ghidra (2019), and the 2023 commit merged a 2018 pull request that removed a dead link. The list therefore predates most current tools and research, including any machine-learning or LLM-assisted reverse engineering.
- Most entries are a bare link, some followed by a quoted publisher or project description, and there are no notes on difficulty, platform or currency. Many point to 2010–2016 posts and PDFs on personal or project sites, and the README suggests archive.org for links that are down. In an automated check at review, six of the 59 unique URLs in the two files gave no response, a 404 or a sign-in page, and the TIE and HyperV entries link to unrelated documents (an iOS 6 security talk and an IR-synthesis slide deck).
- Books link to Amazon store pages, and IDA Pro, Binary Ninja and Hopper are commercial products. The Windows section also links older write-ups on kernel-protection bypasses, which this record does not describe further.
- GitHub detects no license and the repository has no license file, so the list states no reuse terms; linked works keep their own rights. The author offers copies of unavailable documents on request through a personal contact page. Nothing in the list mentions AI or REA.
About this entry
- Type
- Learning resource
- Category
- Learning resources
- Relationship
- Learning resource
- Targets
- Binary
Sources reviewed
The description was reviewed against primary sources. This does not establish runtime testing, security auditing or verified compatibility.
Primary sources
- README.md GitHub · onethawt/reverseengineering-reading-list · Revision a1ee767
- malwareanalysis.md GitHub · onethawt/reverseengineering-reading-list · Revision a1ee767
More in References and learning
- Decomp Academy · Learning resource
- OWASP Firmware Security Testing Methodology (FSTM) · Learning resource
- Installation and client setup · Documentation
- CLI and Evidence · Documentation
- MCP contracts and generated catalog · Documentation
- Native binary investigation · Documentation