{
  "name": "Free Binary Reverse Engineering Resources",
  "site": "https://binrev.lowlevellibrary.com",
  "brand": "BinRev Library",
  "parent": "https://lowlevellibrary.com/",
  "updated": "2026-10-14",
  "count": 24,
  "entries": [
    {
      "id": "re4b",
      "title": "Reverse Engineering for Beginners",
      "provider": "Dennis Yurichev",
      "url": "https://beginners.re/",
      "tags": [
        "beginner",
        "book",
        "x86",
        "arm"
      ],
      "level": "Beginner",
      "format": "Free book (PDF + HTML)",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official site",
      "summary": "A free book that walks through assembly, calling conventions and common patterns on x86 and ARM without assuming prior RE experience.",
      "page": "https://binrev.lowlevellibrary.com/entries/re4b/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "re4b-pdf",
      "title": "RE for Beginners (PDF)",
      "provider": "Dennis Yurichev",
      "url": "https://beginners.re/RE4B-EN.pdf",
      "tags": [
        "beginner",
        "book",
        "pdf"
      ],
      "level": "Beginner",
      "format": "PDF download",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official PDF",
      "summary": "Direct PDF of Reverse Engineering for Beginners, useful offline or for search inside a reader.",
      "page": "https://binrev.lowlevellibrary.com/entries/re4b-pdf/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "malware-unicorn-re101",
      "title": "Malware Unicorn RE101",
      "provider": "Malware Unicorn",
      "url": "https://www.malwareunicorn.org/workshops/re101.html",
      "tags": [
        "beginner",
        "workshop",
        "malware",
        "windows"
      ],
      "level": "Beginner",
      "format": "Workshop notes + labs",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official workshop page",
      "summary": "Hands-on introduction to reversing Windows malware: tools, triage and a guided lab path.",
      "page": "https://binrev.lowlevellibrary.com/entries/malware-unicorn-re101/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "ost2",
      "title": "OpenSecurityTraining2",
      "provider": "OpenSecurityTraining2",
      "url": "https://ost2.fyi/",
      "tags": [
        "courses",
        "x86",
        "architecture",
        "deep-dive"
      ],
      "level": "Intermediate",
      "format": "Free online courses",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official catalog",
      "summary": "Long-form free courses on architecture, assembly and reverse engineering from instructors with deep RE backgrounds.",
      "page": "https://binrev.lowlevellibrary.com/entries/ost2/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "azeria-arm",
      "title": "Writing ARM Assembly",
      "provider": "Azeria Labs",
      "url": "https://azeria-labs.com/writing-arm-assembly-part-1/",
      "tags": [
        "arm",
        "assembly",
        "beginner"
      ],
      "level": "Beginner",
      "format": "Tutorial series",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official tutorial",
      "summary": "Clear multi-part introduction to ARM assembly aimed at people who already know a higher-level language.",
      "page": "https://binrev.lowlevellibrary.com/entries/azeria-arm/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "felix-x86",
      "title": "x86 and amd64 Instruction Reference",
      "provider": "Felix Cloutier",
      "url": "https://www.felixcloutier.com/x86/",
      "tags": [
        "x86",
        "reference",
        "assembly"
      ],
      "level": "Reference",
      "format": "HTML reference",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official reference",
      "summary": "Searchable HTML reference of Intel/AMD instructions, pulled from the vendor manuals into one place.",
      "page": "https://binrev.lowlevellibrary.com/entries/felix-x86/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "elf-man",
      "title": "ELF(5) man page",
      "provider": "man7.org / Linux man-pages",
      "url": "https://man7.org/linux/man-pages/man5/elf.5.html",
      "tags": [
        "elf",
        "linux",
        "formats"
      ],
      "level": "Reference",
      "format": "Man page",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Linux man-pages project",
      "summary": "Canonical description of the ELF object format used on Linux and many Unix systems.",
      "page": "https://binrev.lowlevellibrary.com/entries/elf-man/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "pe-format",
      "title": "PE Format",
      "provider": "Microsoft Learn",
      "url": "https://learn.microsoft.com/en-us/windows/win32/debug/pe-format",
      "tags": [
        "pe",
        "windows",
        "formats"
      ],
      "level": "Reference",
      "format": "Official documentation",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Microsoft Learn",
      "summary": "Microsoft's reference for the Portable Executable format used by Windows binaries and DLLs.",
      "page": "https://binrev.lowlevellibrary.com/entries/pe-format/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "radare2-book",
      "title": "The Official Radare2 Book",
      "provider": "radare org",
      "url": "https://book.rada.re/",
      "tags": [
        "radare2",
        "tools",
        "book"
      ],
      "level": "Intermediate",
      "format": "Online book",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official book",
      "summary": "Documentation for radare2 covering disassembly, analysis, debugging and scripting.",
      "page": "https://binrev.lowlevellibrary.com/entries/radare2-book/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "corkami-pics",
      "title": "Corkami binary format posters",
      "provider": "Ange Albertini (corkami)",
      "url": "https://github.com/corkami/pics",
      "tags": [
        "formats",
        "pe",
        "elf",
        "mach-o",
        "reference"
      ],
      "level": "Reference",
      "format": "Illustrated posters (GitHub)",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "GitHub repository",
      "summary": "Annotated posters and diagrams of PE, ELF, Mach-O and other formats — excellent for visual learners.",
      "page": "https://binrev.lowlevellibrary.com/entries/corkami-pics/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "agner-optimize",
      "title": "Software Optimization Resources",
      "provider": "Agner Fog",
      "url": "https://www.agner.org/optimize/",
      "tags": [
        "x86",
        "performance",
        "assembly",
        "reference"
      ],
      "level": "Advanced",
      "format": "Guides + manuals",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official site",
      "summary": "Deep manuals on calling conventions, instruction latency and optimizing for modern x86 CPUs.",
      "page": "https://binrev.lowlevellibrary.com/entries/agner-optimize/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "challenges-re",
      "title": "challenges.re",
      "provider": "Dennis Yurichev",
      "url": "https://challenges.re/",
      "tags": [
        "practice",
        "crackme",
        "exercises"
      ],
      "level": "Intermediate",
      "format": "Exercise site",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official site",
      "summary": "Short reverse-engineering puzzles across architectures, good for drilling after reading a book.",
      "page": "https://binrev.lowlevellibrary.com/entries/challenges-re/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "crackmes-one",
      "title": "crackmes.one",
      "provider": "crackmes.one community",
      "url": "https://crackmes.one/",
      "tags": [
        "practice",
        "crackme",
        "community"
      ],
      "level": "Beginner",
      "format": "Challenge archive",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official site",
      "summary": "Large community archive of crackmes sorted by difficulty and platform.",
      "page": "https://binrev.lowlevellibrary.com/entries/crackmes-one/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "lief-docs",
      "title": "LIEF documentation",
      "provider": "Quarkslab / LIEF project",
      "url": "https://lief.re/doc/latest/",
      "tags": [
        "tools",
        "pe",
        "elf",
        "mach-o",
        "python"
      ],
      "level": "Intermediate",
      "format": "Library docs",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official docs",
      "summary": "Docs for LIEF, a library to parse and modify PE, ELF and Mach-O binaries from Python or C++.",
      "page": "https://binrev.lowlevellibrary.com/entries/lief-docs/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "angr-docs",
      "title": "angr documentation",
      "provider": "angr project",
      "url": "https://docs.angr.io/",
      "tags": [
        "tools",
        "symbolic-execution",
        "python"
      ],
      "level": "Advanced",
      "format": "Library docs",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official docs",
      "summary": "Documentation for angr, a Python framework for binary analysis and symbolic execution.",
      "page": "https://binrev.lowlevellibrary.com/entries/angr-docs/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "ghidra",
      "title": "Ghidra",
      "provider": "National Security Agency",
      "url": "https://github.com/NationalSecurityAgency/ghidra",
      "tags": [
        "tools",
        "disassembler",
        "decompiler"
      ],
      "level": "Intermediate",
      "format": "Open-source tool (GitHub)",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official GitHub",
      "summary": "NSA's free disassembler and decompiler suite with a large plugin ecosystem.",
      "page": "https://binrev.lowlevellibrary.com/entries/ghidra/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "ghidra-cheatsheet",
      "title": "Ghidra Cheat Sheet",
      "provider": "Ghidra SRE",
      "url": "https://ghidra-sre.org/CheatSheet.html",
      "tags": [
        "ghidra",
        "reference",
        "cheatsheet"
      ],
      "level": "Beginner",
      "format": "Cheat sheet",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official site",
      "summary": "One-page keyboard and workflow cheat sheet for getting productive in Ghidra quickly.",
      "page": "https://binrev.lowlevellibrary.com/entries/ghidra-cheatsheet/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "elf-abi",
      "title": "System V ABI / ELF specification",
      "provider": "Linux Foundation RefSpecs",
      "url": "https://refspecs.linuxfoundation.org/elf/elf.pdf",
      "tags": [
        "elf",
        "abi",
        "reference",
        "pdf"
      ],
      "level": "Reference",
      "format": "PDF specification",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Linux Foundation refspecs",
      "summary": "Classic ELF object-file specification used as the basis for many Unix toolchains.",
      "page": "https://binrev.lowlevellibrary.com/entries/elf-abi/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "capa",
      "title": "capa",
      "provider": "Mandiant",
      "url": "https://github.com/mandiant/capa",
      "tags": [
        "tools",
        "malware",
        "static-analysis"
      ],
      "level": "Intermediate",
      "format": "Open-source tool (GitHub)",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official GitHub",
      "summary": "Identifies capabilities in executable files (anti-debug, network, crypto) from static rules.",
      "page": "https://binrev.lowlevellibrary.com/entries/capa/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "pe-bear",
      "title": "PE-bear",
      "provider": "hasherezade",
      "url": "https://github.com/hasherezade/pe-bear",
      "tags": [
        "tools",
        "pe",
        "windows",
        "gui"
      ],
      "level": "Beginner",
      "format": "Open-source tool (GitHub)",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official GitHub",
      "summary": "Lightweight GUI viewer for PE headers, imports, sections and overlays.",
      "page": "https://binrev.lowlevellibrary.com/entries/pe-bear/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "detect-it-easy",
      "title": "Detect It Easy",
      "provider": "horsicq",
      "url": "https://github.com/horsicq/Detect-It-Easy",
      "tags": [
        "tools",
        "packers",
        "signatures"
      ],
      "level": "Beginner",
      "format": "Open-source tool (GitHub)",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official GitHub",
      "summary": "Signature-based detector for compilers, packers and protectors across PE/ELF/Mach-O.",
      "page": "https://binrev.lowlevellibrary.com/entries/detect-it-easy/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "frida-docs",
      "title": "Frida documentation",
      "provider": "Frida project",
      "url": "https://frida.re/docs/home/",
      "tags": [
        "tools",
        "dynamic-analysis",
        "instrumentation"
      ],
      "level": "Intermediate",
      "format": "Official docs",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official docs",
      "summary": "Docs for Frida, a dynamic instrumentation toolkit for hooking functions on many platforms.",
      "page": "https://binrev.lowlevellibrary.com/entries/frida-docs/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "rizin",
      "title": "Rizin",
      "provider": "Rizin org",
      "url": "https://rizin.re/",
      "tags": [
        "tools",
        "disassembler",
        "fork"
      ],
      "level": "Intermediate",
      "format": "Open-source tool",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official site",
      "summary": "Community fork of radare2 with its own release cycle, GUI (Cutter) and docs.",
      "page": "https://binrev.lowlevellibrary.com/entries/rizin/",
      "free": true,
      "verified": "2026-10-14"
    },
    {
      "id": "ida-free",
      "title": "IDA Free",
      "provider": "Hex-Rays",
      "url": "https://hex-rays.com/ida-free/",
      "tags": [
        "tools",
        "disassembler",
        "freeware"
      ],
      "level": "Intermediate",
      "format": "Freeware download",
      "license": "Free to access. Copyright held by the provider; this directory only links to it and reproduces no content.",
      "source": "Official product page",
      "summary": "Free edition of IDA for learning disassembly workflows; commercial features are paid separately.",
      "page": "https://binrev.lowlevellibrary.com/entries/ida-free/",
      "free": true,
      "verified": "2026-10-14"
    }
  ]
}