← Back to Labs

Binary Reverse Engineering & Disassembly

Step through ELF header parsing, machine code disassembly, Ghidra P-code decompilation, GDB watchpoints, and anti-debugging tricks

ELF HeaderDisassemblyP-CodeGDB DebugCFG ControlDe-obfuscateELF64 Header (e_ident)Magic: 7F 45 4C 46 (.ELF)Class: 02 (64-bit Architecture)Data: 01 (Little Endian)Type: EXEC (Executable file)e_entry: 0x00401140e_phoff: 0x00000040 (Prog Headers)e_shoff: 0x000018c0 (Sect Headers)Section Header Table (.shdr).textVA: 0x401000r-xp (Code).rodataVA: 0x402000r--p (Const).dataVA: 0x403000rw-p (Globals).symtabVA: 0x404000r--p (Symbols)
STEP 1 OF 6

Executable File Header Parsing

ELF headers define entry points, sections (.text, .data, .rodata), and symbol tables that tell the OS how to load binary code into memory.

Arrow keys to navigate · R to reset

Tap dots to jump to any step

Read the full article →Take the quiz →