---
title: "Research · 6 Reverse Engineering, Binary & Malware · VORNAC"
description: "Low-level attack surfaces — exploitation, fuzzing, and malware behavior. 4 curated notes across featured, reference, and background tiers."
url: https://www.vornac.com/en/research/reverse-malware
lang: en
published: 2026-06-02
updated: 2026-06-02
alternate_de: https://www.vornac.com/research/reverse-malware
---

[Research Index](https://www.vornac.com/en/research) / 6 · Reverse Engineering, Binary & Malware

VORNAC RESEARCH

6

# Reverse Engineering, Binary & Malware.

Low-level attack surfaces — exploitation, fuzzing, and malware behavior.

4

Notes in this domain

0

Featured

0

Reference

4

Background

Background

-   [Binary Exploitation — Fuzz to Working Exploit](https://www.vornac.com/en/research/reverse-malware/binary-exploitation-pipeline)

    End-to-end memory-corruption pipeline: corruption classes, fuzzing-driven crash discovery, mitigation tradeoffs per stage, and the Windows internals that earn offensive relevance.

    —

-   [Reverse Engineering Fundamentals](https://www.vornac.com/en/research/reverse-malware/reverse-engineering-fundamentals)

    Quick-reference for disassemblers, debuggers, and the signatures to look for first — including an ARM reference for analysts moving from x86 and the modern browser as an attack surface.

    —

-   [Malware Analysis — Canonical Reference](https://www.vornac.com/en/research/reverse-malware/malware-analysis-canon)

    Triage workflow, packer recognition, behavioral exploit profile, RAT family-behavior reference, and the template for documenting a sustained adversary group.

    —

-   [Document & Runtime Exploits](https://www.vornac.com/en/research/reverse-malware/document-and-runtime-exploits)

    PDF as a delivery vehicle (structure, script extraction, parser quirks) and the Java-runtime exploit reference — historical and current patterns, with what each reveals about the deployed JRE.

    —

[Previous domain 5 · Threat Intelligence & Adversary Modeling](https://www.vornac.com/en/research/threat-intelligence) [All eight domains](https://www.vornac.com/en/research) [Next domain 7 · AI, Data & Emerging Risk](https://www.vornac.com/en/research/ai-emerging)

From reference to evidence

## Validate these gaps in your own environment.