domains / families / security / vm-and-bytecode-reverse

vm-and-bytecode-reverse

separate

Custom VM and bytecode reverse engineering playbook. Use when CTF challenges or protected software implement custom virtual machines with proprietary bytecode, dispatcher loops, or maze-style challenges.

When to use

• CTF challenges with custom virtual machines
• Proprietary bytecode analysis
• Dispatcher loop identification
• Maze-style challenges
• Custom ISA reconstruction
• Writing custom disassemblers
• VM protector analysis

When not to use

• Commercial protectors like VMProtect or Themida
• Using angr for symbolic execution
• Anti-debugging checks

Skill page

Source