Reverse Engineering
Read compiled code - disassembly, decompilers, Ghidra, and function hooking fundamentals.
Recommended Prerequisites
These are recommendations - you can start this track at any time.
About this track
Read compiled code - disassembly, decompilers, Ghidra, and function hooking fundamentals.
The Reverse Engineering track collects 4 modules and 16 lessons into a single ordered path. Each module ends with a checkpoint quiz; passing the checkpoint unlocks the next module so you can track your progress without guessing whether the material has stuck.
You start with "Reverse Engineering Basics" and finish on "Function Hooking & Instrumentation". The whole track sits inside the Reverse Engineering area of the curriculum, so the writing assumes the prerequisites listed above and skips ground that an earlier track has already covered.
What this track covers
- Reverse Engineering Basics — Learn to read compiled code. Understand how to analyse binaries, recognise common patterns, and work backward from machine code to understand program behaviour.
- How Decompilers Work — From machine code back to something readable. Learn how decompilers lift binary code to intermediate representations, recover types and control flow, and produce pseudo-C output in tools like Ghidra and IDA.
- Binary Analysis with Ghidra — Learn to use Ghidra, the NSA's open-source reverse engineering framework - from navigating disassembly and decompiler output to recovering data structures and writing automation scripts.
- Function Hooking & Instrumentation — Intercept, modify, and observe function calls in running programs. Learn inline hooking, IAT/PLT hooking, dynamic binary instrumentation with Frida and DynamoRIO, and practical uses for security research.
How the track works
Every lesson is a short page with diagrams, runnable examples, and the kind of edge-case footnotes you usually only find in textbooks. Where it makes sense, the lesson is paired with a CPU simulation or a coding challenge so you can poke at the idea instead of just reading about it.
The lessons themselves are free to read with a free account. The 4 checkpoint quizzes that gate the next module are also free, as are the lesson IDE and CPU simulations. Optional 777-tier tools — the step-through debugger, decompiler, ROP gadget builder, heap visualiser, and exploit labs — sit alongside the lessons but are not required to follow the track from start to finish.
You can jump in at any point. Be Bitwise is built around a free forever curriculum, with no time limits and no expiring access. Pick the next lesson when you have an hour; come back when you do not.