Setup

This chapter discusses Linux reverse engineering, so we need to have a Linux setup. For reverse engineering, it is recommended to deploy Linux on a bare-metal machine. And since most of the analysis tools that have been developed are Debian-based, let's use 32-bit Ubuntu Desktop. I chose Ubuntu because it has a strong community. Because of that, most of the issues may already have a resolution or solutions may be readily available. 

 

 

 

 

 

 

Why build our setup on a bare-metal machine? It is a better host for our sandbox clients, especially when monitoring network traffic. It also has an advantage in proper handling of Windows malware, preventing compromise due to accidental malware execution.

You can go to https://www.ubuntu.com/ to obtain an ISO for the Ubuntu installer. The site includes an installation guide. For additional help, you can visit the community forum at https://ubuntuforums.org/.

Note

"Bare-metal machines" refers to computers that execute code directly on the hardware. It...