Reverse Engineering for Beginners
Dennis Yurichev · Beginner · Free book (PDF + HTML)
A free book that walks through assembly, calling conventions and common patterns on x86 and ARM without assuming prior RE experience.
beginnerbookx86armFree Binary Reverse Engineering Resources
24 free resources on binary reverse engineering, hand-curated and link-checked on 2026-10-14. Part of Low Level Library. A curated directory of free books, labs, docs and tools for reading binaries, file formats and reverse engineering.
RE for Beginners (PDF)
Dennis Yurichev · Beginner · PDF download
Direct PDF of Reverse Engineering for Beginners, useful offline or for search inside a reader.
beginnerbookpdfMalware Unicorn RE101
Malware Unicorn · Beginner · Workshop notes + labs
Hands-on introduction to reversing Windows malware: tools, triage and a guided lab path.
beginnerworkshopmalwarewindowsOpenSecurityTraining2
OpenSecurityTraining2 · Intermediate · Free online courses
Long-form free courses on architecture, assembly and reverse engineering from instructors with deep RE backgrounds.
coursesx86architecturedeep-diveWriting ARM Assembly
Azeria Labs · Beginner · Tutorial series
Clear multi-part introduction to ARM assembly aimed at people who already know a higher-level language.
armassemblybeginnerx86 and amd64 Instruction Reference
Felix Cloutier · Reference · HTML reference
Searchable HTML reference of Intel/AMD instructions, pulled from the vendor manuals into one place.
x86referenceassemblyELF(5) man page
man7.org / Linux man-pages · Reference · Man page
Canonical description of the ELF object format used on Linux and many Unix systems.
elflinuxformatsPE Format
Microsoft Learn · Reference · Official documentation
Microsoft's reference for the Portable Executable format used by Windows binaries and DLLs.
pewindowsformatsThe Official Radare2 Book
radare org · Intermediate · Online book
Documentation for radare2 covering disassembly, analysis, debugging and scripting.
radare2toolsbookCorkami binary format posters
Ange Albertini (corkami) · Reference · Illustrated posters (GitHub)
Annotated posters and diagrams of PE, ELF, Mach-O and other formats — excellent for visual learners.
formatspeelfmach-oreferenceSoftware Optimization Resources
Agner Fog · Advanced · Guides + manuals
Deep manuals on calling conventions, instruction latency and optimizing for modern x86 CPUs.
x86performanceassemblyreferencechallenges.re
Dennis Yurichev · Intermediate · Exercise site
Short reverse-engineering puzzles across architectures, good for drilling after reading a book.
practicecrackmeexercisescrackmes.one
crackmes.one community · Beginner · Challenge archive
Large community archive of crackmes sorted by difficulty and platform.
practicecrackmecommunityLIEF documentation
Quarkslab / LIEF project · Intermediate · Library docs
Docs for LIEF, a library to parse and modify PE, ELF and Mach-O binaries from Python or C++.
toolspeelfmach-opythonangr documentation
angr project · Advanced · Library docs
Documentation for angr, a Python framework for binary analysis and symbolic execution.
toolssymbolic-executionpythonGhidra
National Security Agency · Intermediate · Open-source tool (GitHub)
NSA's free disassembler and decompiler suite with a large plugin ecosystem.
toolsdisassemblerdecompilerGhidra Cheat Sheet
Ghidra SRE · Beginner · Cheat sheet
One-page keyboard and workflow cheat sheet for getting productive in Ghidra quickly.
ghidrareferencecheatsheetSystem V ABI / ELF specification
Linux Foundation RefSpecs · Reference · PDF specification
Classic ELF object-file specification used as the basis for many Unix toolchains.
elfabireferencepdfcapa
Mandiant · Intermediate · Open-source tool (GitHub)
Identifies capabilities in executable files (anti-debug, network, crypto) from static rules.
toolsmalwarestatic-analysisPE-bear
hasherezade · Beginner · Open-source tool (GitHub)
Lightweight GUI viewer for PE headers, imports, sections and overlays.
toolspewindowsguiDetect It Easy
horsicq · Beginner · Open-source tool (GitHub)
Signature-based detector for compilers, packers and protectors across PE/ELF/Mach-O.
toolspackerssignaturesFrida documentation
Frida project · Intermediate · Official docs
Docs for Frida, a dynamic instrumentation toolkit for hooking functions on many platforms.
toolsdynamic-analysisinstrumentationRizin
Rizin org · Intermediate · Open-source tool
Community fork of radare2 with its own release cycle, GUI (Cutter) and docs.
toolsdisassemblerforkIDA Free
Hex-Rays · Intermediate · Freeware download
Free edition of IDA for learning disassembly workflows; commercial features are paid separately.
toolsdisassemblerfreewareStay in the loop
Occasional notes when we add free binary reverse engineering resources. No spam. Unsubscribe any time.
Powered by Resend. We never sell addresses.