Learn

The Rerius Learning Path

69 lessons across 8 levels, from "what is binary analysis" to building your own plugins. Jump to any lesson directly: progress is tracked locally in your browser, no account needed.

0 / 69 complete

Level 0 - Foundation (files 00-07)

00 Welcome and how to use this path 01 What binary analysis is and why it matters 02 Installation on Linux, macOS, Android/Termux 03 Running your first analysis 04 ELF binary format internals 05 Windows PE format internals 06 macOS Mach-O format internals 07 ELF vs PE vs Mach-O side by side

Level 1 - Basic Analysis (files 10-18)

10 All CLI flags and combinations 11 Interpreting section output 12 Symbols, stripping, PLT entries 13 How to read disassembly output 14 x86-64 assembly fundamentals 15 ARM64 assembly fundamentals 16 RISC-V RV64 assembly fundamentals 17 ASCII and unicode string scanning 18 Entry points and startup flow

Level 2 - Intermediate Analysis (files 20-28)

20 How function detection works 21 Building and reading xrefs 22 CFG construction and reading 23 Practical CFG analysis techniques 24 Dominator-based loop detection 25 Call graph analysis 26 Switch/dispatch table detection 27 Unicode string extraction (UTF-8, UTF-16) 28 Instruction group classification

Level 3 - JavaScript API (files 30-38)

30 API overview and installation 31 Load patterns and ReriusBinary lifecycle 32 Section queries in JavaScript 33 Function queries in JavaScript 34 Structured disassembly 35 Cross-reference queries 36 Full analysis pipeline 37 TypeScript types and usage 38 Async and batch patterns

Level 4 - Advanced Analysis (files 40-46)

40 Shannon entropy scanning 41 Detecting packed and encrypted binaries 42 Recursive descent disassembly 43 IVF for obfuscation and suspicious patterns 44 Most-called function analysis 45 Detecting obfuscation: IVF, poly map, DSA, AIRE 46 C++ Itanium ABI name demangling

Level 5 - Symbolic Execution and Decompilation (files 50-56)

50 What symbolic execution is 51 NR: Rerius Representation (inter-function IR, type system) 52 Pseudo-C decompiler: type inference, resolved calls, program module 53 Reading and interpreting pseudo-C 54 The concrete ARM64 + RISC-V execution engine 55 Practical emulator applications 56 DSA: Dynamic Single Assignment (runtime value annotation)

Level 6 - Real World Reverse Engineering (files 60-66)

60 Safe, systematic malware analysis 61 Full crackme analysis walkthrough 62 Identifying vulnerability patterns 63 Understanding custom binary protocols 64 Android native libraries and JNI 65 Working with stripped binaries 66 AOT C snapshots - create, compile, run, load

Level 7 - Integration and Automation (files 70-77)

70 Full REST API reference and automation 71 Reusable analysis scripts in Python and JS 72 Web interface panels and workflows 73 Integrating Rerius into Express servers 74 Analyzing many binaries at once 75 CI/CD pipeline integration 76 Building custom analysis plugins 77 Fault isolation model: robust tools on top of Rerius

Appendix (files 80-84)

80 Assembly patterns cheatsheet 81 All CLI flags in one place 82 All JS API methods in one place 83 x86-64, ARM64, RISC-V side by side 84 Definitions of all technical terms used

ESC

↑↓ navigate↵ openesc close