I will reverse engineer your binary firmware or private protocol


About this gig
需要了解二进制、应用或设备到底是如何工作的吗?我会逆向工程软件、固件和私有协议,然后给你一份技术报告,你可以根据它行动。
我分析的内容
- 静态+动态二进制分析(Ghidra、IDA、x64dbg、radare2)
- 固件解压:文件系统、配置、硬编码密钥、更新格式
- 从应用流量中重建私有协议/API
- 遗留逻辑恢复:从exe中重建未公开的计算或规则
- 混淆、封装器和虚拟机式保护分流
- iOS / Android 应用行为与本地数据格式分析
你能得到什么
- 发现报告:架构、关键功能、数据结构、调用流程
- 带有注释偏移量、符号和函数名称的可复现步骤
- Python 或工具脚本,能帮你节省时间
- 交付后14天的书面问答
范围
我只处理你拥有或授权测试的二进制文件、固件和数据。我不破解授权软件,不绕过DRM或授权,也不帮忙游戏作弊。
不确定你的目标是否可行?给我发消息,告诉我文件类型和你的目标。我会在你下单前,免费一条消息诚实回复。
Get to know Chengming Z
Reverse Engineer
- FromChina
- Member sinceOct 2026
Languages
English, Chinese
FAQ
Can you crack or bypass a license, DRM, or activation system?
No. I only analyze assets you own or are authorized to test. Cracking licensed software, bypassing DRM, and game cheats are out of scope and I will decline those orders.
Which tools do you use?
Ghidra and IDA Pro for static analysis, x64dbg / WinDbg for dynamic, Frida for runtime hooking, radare2/rizin for scripted work, binwalk and unsquashfs for firmware, Wireshark and mitmproxy for protocols, Unicorn/Qiling for emulation where it is faster.
Will I get the original source code back?
No one can recover original source. You get behavior-level analysis, rebuilt pseudo-code, and where the budget allows, a clean reimplementation in C#, C++ or Python that reproduces the observed input/output behavior.
What if the target is packed or heavily protected?
Triage is part of every package. If unpacking is a project on its own, I will tell you after the Basic report and quote it as a separate order. You will never be surprised by a hidden cost mid-order.
How fast can you deliver?
3 / 5 / 7 days by package. Rush delivery within 24 hours is available as an extra on Basic and Standard.

