Reverse › Module 5 › Lesson 4
Lab — Static Tools
Pack objdump, Ghidra, and tool comparison — static analysis artifact on YOUR toy binary at $RE_LAB.
Visual · re_static_tools_lab
Lab: static tools pack. $RE_LAB only. Original Cyberlium.
Opening
Static tools pack merges CLI and GUI literacy before dynamic debugging in M6.
Lessons 5-1–5-3 covered objdump/readelf, Ghidra, and named commercial tools. This lab ships the static tools pack: CLI cheat sheet, Ghidra checklist, disassembler comparison, plus one annotated listing from YOUR toy on $RE_LAB. No commercial patch artifacts. Next: Quiz — Static RE Tools.
1. Lab contract: static tools pack
Create $HOME/cyberlium-lab/t23-m05-l04-static-tools-lab.txt merging CLI sheet, Ghidra checklist, tool comparison, and one decompile/disassembly snippet from YOUR toy.
Optional: link to M4 format pack sha256 for same target.
Command guide
Try these commands — Lab contract: static tools pack
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Static RE workflow — https://ghidra.re/ (file → strings → objdump → GUI) xxd(1) — https://man7.org/linux/man-pages/man1/xxd.1.html (hex view literacy) crackmes.one — https://crackmes.one/ (practice on legal crackmes only)
═══ INSTALL ═══
Linux (Debian/Ubuntu): Built-in (binutils) Built-in (vim-common / xxd)
Command — copy this
sudo apt install binutils
macOS: Built-in (Xcode CLI) or brew install binutils Built-in or brew install binutils
Windows: Use WSL or install binutils Use WSL or Git Bash xxd Use WSL binutils
═══ LINUX / macOS ═══
Command — copy this
export LAB_RE=${LAB_RE:-$HOME/cyberlium-lab/t23-re}
file "$LAB_RE/bin/"*
strings "$LAB_RE/bin/check" | head -12
xxd "$LAB_RE/bin/hello" | head -6
objdump -d "$LAB_RE/bin/check" | grep -E '<main>|<add>' | head -6
nm "$LAB_RE/bin/check" | grep ' main'═══ WINDOWS ═══
Command — copy this
Get-ChildItem $HOME/cyberlium-lab/t23-re/bin -ErrorAction SilentlyContinue | Select-Object Name
Primary tools to practice this lesson: strings, xxd, objdump, nm. Reference sites: Static RE workflow (https://ghidra.re/); xxd(1) (https://man7.org/linux/man-pages/man1/xxd.1.html); crackmes.one (https://crackmes.one/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Cross-check patch misuse
Grep for license bypass, keygen, commercial patch language — delete. Export methodology notes only, not patched binaries.
Classmates build their own static packs on their $RE_LAB.
3. Lock the proof
chmod 600 on the pack. Quiz next — then Dynamic RE Literacy.
Static literacy feeds gdb and breakpoints in M6.
4. What you ship: static RE tools pack for $RE_LAB
CLI + Ghidra + tool comparison merged with one listing snippet. $RE_LAB named. YOUR toy only. chmod 600.
5. What you record before the next lesson
Date. Static tools pack path. $RE_LAB named. File t23-m05-l04-static-tools-lab.txt chmod 600.
6. Wrong vs right: commercial piracy vs crackmes/CTF toys
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Include commercial patch binary in pack. Pirate IDA for lab screenshot.
Right
Write YOUR static tools pack for $RE_LAB toy binary. chmod 600. Next: Quiz — Static RE Tools.
Mission: freeze YOUR static tools pack
1) Merge M5 literacy sections. 2) Attach one Ghidra or objdump snippet. 3) Link M4 format sha256. 4) chmod 600.
Stuck? Ask Cyberlium AI Mentor
Static pack is the handoff artifact to dynamic RE.
Knowledge Check
APPLY: This lab requires:
Multiple choice
Knowledge Check
APPLY: True or False: Static pack should link format pack sha256.
True or False
Knowledge Check
APPLY: Exported listing should document:
Multiple choice