Field Manual

WEAPON

A reverse engineering startup course — binary analysis, assembly, debugging, and Windows internals, taught through interactive investigation. Progress is saved locally in your browser; modules are open in any order.

RECOMMENDED FIRST

SOC Analyst's Handbook

Try this core course module first — an interactive L1 SOC/MXDR training platform with 33 modules and a live incident-triage simulator.

Open Handbook
0%

Overall Progress

Rank

RECRUIT

0/53

Lessons

0/24

Labs

12

Modules

 

Start Here

What is Reverse Engineering?

Continue →

Module Roadmap

View Labs
01
START3 lessons

Orientation: what reverse engineering is and how to think like a reverse engineer.

0%
Lessons
  1. 01What is Reverse Engineering?10m
  2. 02How to Think Like a RE15m
  3. 03Setting Up Your Arsenal20m
02
01 FOUNDATIONS4 lessons

Binary anatomy, CPU fundamentals, memory layout, and executable formats.

0%
Lessons
  1. 01Binary Anatomy15m
  2. 02CPU Fundamentals20m
  3. 03Memory Layout15m
  4. 04Executable Formats20m
03
02 ASSEMBLY8 lessons

Registers, instructions, the stack, functions, control flow, bit tricks, SIMD, and how it all encodes to bytes.

0%
Lessons
  1. 01Registers & Data Movement20m
  2. 02Arithmetic & Logic25m
  3. 03Control Flow20m
  4. 04Stack & Functions25m
  5. 05Common Patterns20m
  6. 06Shifts, Rotates & Bit Tricks20m
  7. 07SIMD & Floating-Point25m
  8. 08Instruction Encoding20m
04
03 STATIC ANALYSIS5 lessons

Strings, imports, functions, cross references, and decompilation.

0%
Lessons
  1. 01Strings & Metadata15m
  2. 02Imports & Exports15m
  3. 03Functions, Naming & Annotation20m
  4. 04Cross References20m
  5. 05Decompilation20m
05
04 DEBUGGING4 lessons

Breakpoints, register inspection, execution flow, and anti-debugging.

0%
Lessons
  1. 01Breakpoints20m
  2. 02Registers & Memory Inspection20m
  3. 03Execution Flow & Stepping20m
  4. 04Anti-Debugging & Bypass25m
06
05 EXPLOIT DEVELOPMENT5 lessons

Stack overflows, shellcode, memory protections, and return-oriented programming.

0%
Lessons
  1. 01Stack Overflows25m
  2. 02Shellcode & Calling Conventions20m
  3. 03Memory Protections20m
  4. 04Return-Oriented Programming25m
  5. 05Exploit Development Workflow15m
07
06 WINDOWS5 lessons

The PE format, processes, threads, DLLs, and the Windows API.

0%
Lessons
  1. 01PE Format Deep Dive25m
  2. 02Processes, Handles & Virtual Memory20m
  3. 03Threads, Fibers & Scheduling20m
  4. 04DLLs & the Loader20m
  5. 05Windows API & Native Layer25m
08
07 LINUX5 lessons

The ELF format, processes and syscalls, the dynamic linker, and Linux-native tooling.

0%
Lessons
  1. 01ELF Format Deep Dive25m
  2. 02Processes & Syscalls20m
  3. 03Shared Libraries & the Dynamic Linker20m
  4. 04Linux Anti-Debugging & ptrace20m
  5. 05GDB & Linux Tooling15m
09
08 ARM64 & MOBILE4 lessons

ARM64 architecture, calling conventions, and reversing Android and iOS apps.

0%
Lessons
  1. 01ARM64 Architecture Basics20m
  2. 02ARM64 Calling Convention & the Stack20m
  3. 03Android APK Reverse Engineering25m
  4. 04iOS & Mach-O Basics20m
10
09 MALWARE ANALYSIS5 lessons

Behavior, persistence, C2, obfuscation, and IOC extraction.

0%
Lessons
  1. 01Behavior & Triage20m
  2. 02Persistence Mechanisms20m
  3. 03Command & Control20m
  4. 04Obfuscation & Packing25m
  5. 05IOC Extraction & Reporting20m
11
10 ANTI-RE & OBFUSCATION4 lessons

Manual unpacking, VM-based obfuscation, control flow flattening, and anti-disassembly.

0%
Lessons
  1. 01Packers & Unpacking25m
  2. 02Virtual Machine-Based Obfuscation20m
  3. 03Control Flow Flattening & Junk Code20m
  4. 04Anti-Disassembly Tricks20m
12
FINAL1 lesson

The Unknown Binary — a capstone investigation that ties everything together.

0%
Lessons
  1. 01The Unknown Binary30m

Settings

Progress Backup

Backup your progress to a file or restore from a previous export.