Reverse › Module 1 › Lesson 4
Lab — Scope
Pack RE mindset — definition, legal targets, lab inventory — literacy file only, dest $RE_LAB.
Visual · re_scope_lab
Lab: write scope pack. $RE_LAB only. Original Cyberlium.
Opening
Scope pack before any binary hits the disassembler — paperwork discipline RE mentors expect.
Lessons 1–3 defined RE, legal targets, and lab binary hygiene. This lab ships the combined artifact: RE definition, target policy, and lab inventory for $RE_LAB. No deep disassembly required — mindset and scope paperwork first. Next: Quiz — RE Mindset and Scope.
1. Lab contract: write the scope pack
Create $HOME/cyberlium-lab/t23-m01-l04-scope-lab.txt with date, operator, $RE_LAB VM name, RE definition, legal target policy, lab binary inventory, and NEVER commercial piracy lines.
Optional: one-line proof your RE VM exists — still no unauthorized binary analysis required in this lab.
Command guide
Try these commands — Lab contract: write the scope pack
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
readelf(1) — https://man7.org/linux/man-pages/man1/readelf.1.html (ELF header literacy) Microsoft PE format — https://learn.microsoft.com/en-us/windows/win32/debug/pe-format (Windows literacy) Ghidra — https://ghidra.re/ (import ELF/PE in GUI after CLI triage)
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install binutils sudo apt install build-essential
macOS:
Command — copy this
brew install binutils xcode-select --install # or brew install gcc
Windows: Use WSL or install file for Windows Use WSL binutils Use WSL or MinGW
═══ LINUX / macOS ═══
Optional command
sudo apt install build-essential binutils # gcc readelf objdump nm
Command — copy this
export LAB_RE=${LAB_RE:-$HOME/cyberlium-lab/t23-re}
grep never "$LAB_RE/roe.txt"
file "$LAB_RE/bin/hello"
readelf -h "$LAB_RE/bin/hello"═══ WINDOWS ═══
Command — copy this
Get-Content $HOME/cyberlium-lab/t23-re/roe.txt | Select-String never Get-Item $HOME/cyberlium-lab/t23-re/bin/hello -ErrorAction SilentlyContinue | Select-Object Name, Length
Primary tools to practice this lesson: file, readelf, gcc. Reference sites: readelf(1) (https://man7.org/linux/man-pages/man1/readelf.1.html); Microsoft PE format (https://learn.microsoft.com/en-us/windows/win32/debug/pe-format); Ghidra (https://ghidra.re/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Cross-check against misuse patterns
Grep notes for warez paths, keygen interest, or commercial crack requests — redact or delete. Tutorials that patch paid apps get rewritten to toy-binary placeholders before you copy habits.
Classmates build their own scope packs for their $RE_LAB — not yours.
3. Lock the proof
chmod 600 on the pack. Quiz is next — then CPU and Memory Literacy.
RE mentors archive scope before first crackme; you are practicing that habit early.
4. What you ship: RE scope pack for $RE_LAB
Scope pack: definition, legal targets, lab inventory. $RE_LAB named. NEVER commercial piracy. chmod 600.
5. What you record before the next lesson
Date. Scope pack path. $RE_LAB scope note. File t23-m01-l04-scope-lab.txt chmod 600.
6. Wrong vs right: commercial piracy vs crackmes/CTF toys
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Skip the file and analyze a warez crackme. Add unauthorized commercial target to pack.
Right
Write YOUR scope pack for $RE_LAB. chmod 600. Next: Quiz — RE Mindset and Scope.
Mission: freeze YOUR scope pack on disk
1) Merge definition, targets, inventory sections. 2) Name $RE_LAB. 3) chmod 600. Never list commercial piracy as an approved target.
Stuck? Ask Cyberlium AI Mentor
Scope packs are boring on purpose — boring keeps you legal.
Knowledge Check
APPLY: This lab requires:
Multiple choice
Knowledge Check
APPLY: True or False: You should chmod 600 on RE notes.
True or False
Knowledge Check
APPLY: A tutorial patches a commercial game. You:
Multiple choice