Protocols Are Everywhere: RE with Netzob
summary
Netzob is an open-source semi-automatic protocol reverse-engineering tool; the talk covers recent improvements to its ability to infer message formats (vocabularies) and state machines (grammars) for protocols across Network, USB, files, APIs, IPC and hardware flows. It describes dedicated capture/import modules for network, file and process data, export options to tools like Peach, Scapy and Wireshark, and the built-in traffic generation/fuzzing engine for realistic endpoint simulation; a short demo of these features is included.
AI-written summary · about
related talks
48mHow to Reverse-Engineer a Network Protocol and Find Vulnerabilities in a Device Without Using Firmware
51mReverse Engineering of Proprietary Radio Protocols
32mThere and Back Again: Discovering OT Devices Across Protocol Gateways
51mOT Reverse Engineering - What Can Be Automated?
01h 46mTutorial: Introduction to Reverse Engineering
39mImproving OT Network and Host Baselines to Secure Critical Infrastructure
20mRust for Safer Protocol Development
40mUncovering Covert Channels in Your IoT Networks