Chip Security Testing 
Binary Security Analysis 
Resources 
Blog
Contact us
Back to all articles
Corporate News
Binary Analysis

esReven 2023.04 is out!

4 min read
Edit by Mathieu Favréaux • May 2, 2023
Share

eShard is pleased to announce that esReven version 2023.04 is now out!

This article covers the changes introduced in this release. In summary, this second version released by eShard focuses on 2 areas:

  • Quality-of-life updates to the product.
  • Introduction of two new knowledge modules.

 

Quality-of-life updates to the product

  • First of all, esReven is now the easiest to install it has ever been! The packaging matures as we take more and more environments into account: you can now install & run esReven with an up-to-date docker compose plugin, on no-execute partitions, with no ptrace rights, you can configure proxies, and so on.
  • We also addressed a number of small issues that smooth out the web interface experience: the log out/log back in workflow now works as expected, we fixed issues that required the user to refresh the page, etc.
  • Lastly, we made a few improvements to the esReven engine and its environment: the ASM stub is easier to discover and use, and now supports Rust as well. Bugs have also been fixed in the API and other places.

You can read the full list of changes in this version's release notes.

 

Subscription-based knowledge modules

Following the path set in the previous version, in parallel to this version we are introducing the first two subscription-based knowledge-base modules. These must be purchased separately from your esReven license, and will get new content regularly.

Advanced Usage How-tos

These how-tos will provide straightforward guides that cover situations where translating the intent of the reverse engineer into a set of tasks is not trivial. They are intended for those who wish to refine their esReven skills to tackle advanced use cases and be more efficient with the platform.

Advanced recording

At the time of this release, we have focused on addressing advanced recording situations, as well as networking options:

  • Recording non-trivial environments: discover how to efficiently record many use-cases with general strategies and actionable information to get you started quickly.
    • Overview of the tools at our disposal for recording.
    • Strategy: recording a standalone application as it loads data (file, URL, etc.).
    • Strategy: recording a standalone application as I communicate with it (via IPC, network or other).
    • Strategy: the crash (or procedure) is non-deterministic or not 100% reliable.
    • How to: every method to stop the recording when a process exits, crashes, or when the OS crashes.
    • How to to inject code in a program to control its behavior or its recording.
  • Advanced target VM networking: discover various networking possiblities for your target VM and the proper QEMU options you can use, covering more advanced use cases than the default.

 

Applied Algorithms & Tools

In this module, we introduce comprehensive tools built on top of the esReven framework. These tools will help you better leverage esReven to answer questions more effectively, while teaching you about the approach taken.

Process volume overview

Tools are documented such that they can be adapted if necessary, and, when applicable, provide their functionality as a library so other scripts can be built on top of them.

At the time of this release, we have focused on extracting valuable information from Windows traces with two important tools:

  • Process activity (Windows): This tool notebook presents the activity on files on a trace: file creation, accesses, etc.
  • File Activity (Windows): This tool notebook presents an overview of the general process activity in a trace: process starts, exits, crashes.

Along with the tools come Python libraries to exploit the data in your own scripts, as well as knowledge notebooks that explain the approach taken.

 

And what now?

And that's it for this release! You can find the full list of improvements and fixes in the version's release notes.

Interested in knowing more about knowledge modules?

Contact us to get the detailed content of those modules and how to get access to them.

Want to try the product?

  • We provide an extensive set of online demos, which constitute a good first step with tutorials available in most. However, they are based on the previous REVEN version for the time being.
  • Want to try the new esReven? Contact us!
Share

Categories

All articles
(108)
Binary Analysis
(57)
Chip Security
(43)
Corporate News
(18)
Expert Review
(6)
Time Travel Analysis
(13)

you might also be interested in

Chip Security

The backup superhero of Post-Quantum Cryptography

8 min read
Edit by Jad Zahreddine • Oct 24, 2025
CopyRights eShard 2026.
All rights reserved
Privacy policy | Legal Notice
CHIP SECURITY
esDynamicExpertise ModulesInfraestructureLab Equipments