Ghidra Capabilities – Get Your Free NSA Reverse Engineering Tool [pdf] • Hacker News Board

Ghidra Capabilities – Get Your Free NSA Reverse Engineering Tool [pdf]

#1

Post by Errorcod3 » Wed, Mar 06, 2019, 3:05 PM UTC

Ghidra Capabilities – Get Your Free NSA Reverse Engineering Tool [pdf]
rsaconference.com

Re: Ghidra Capabilities – Get Your Free NSA Reverse Engineering Tool [pdf]

#2

Post by julianh95 » Wed, Mar 06, 2019, 4:37 PM UTC

Reviews of it seem alright. Still have yet to see the source code added to the repo :)

Re: Ghidra Capabilities – Get Your Free NSA Reverse Engineering Tool [pdf]

#3

Post by cyphar » Wed, Mar 06, 2019, 4:58 PM UTC

Previous discussion: https://news.ycombinator.com/item?id=19315273

Re: Ghidra Capabilities – Get Your Free NSA Reverse Engineering Tool [pdf]

#4

Post by tptacek » Wed, Mar 06, 2019, 5:06 PM UTC

julianh95 wrote: post #2

Reviews of it seem alright. Still have yet to see the source code added to the repo :)

Isn't the source code zipped up alongside the binaries?

Re: Ghidra Capabilities – Get Your Free NSA Reverse Engineering Tool [pdf]

#5

Post by mcpherrinm » Wed, Mar 06, 2019, 5:10 PM UTC

tptacek wrote: post #4

julianh95 wrote: post #2

Reviews of it seem alright. Still have yet to see the source code added to the repo :)

Isn't the source code zipped up alongside the binaries?

For Java, not for native code. Fortunately we have Ghidra to look at itself?

Re: Ghidra Capabilities – Get Your Free NSA Reverse Engineering Tool [pdf]

#6

Post by Dumbdo » Wed, Mar 06, 2019, 5:42 PM UTC

julianh95 wrote: post #2

Reviews of it seem alright. Still have yet to see the source code added to the repo :)

For anyone else curious: https://github.com/NationalSecurityAgency/ghidra/wiki/Freque...

> This repository is a placeholder for the full open source release. Be assured efforts are under way to make the software available here. In the meantime, enjoy using Ghidra on your SRE efforts, developing your own scripts and plugins, and perusing the over a million lines of Java and Sleigh code released within the initial public release. The release can be downloaded from our project homepage at www.ghidra-sre.org. Please consider taking a look at our contributor guide to see how you can participate in this open source project when it becomes available.

Re: Ghidra Capabilities – Get Your Free NSA Reverse Engineering Tool [pdf]

#7

Post by megous » Wed, Mar 06, 2019, 5:43 PM UTC

Looks like that thanks to Sleigh, adding support for decompiling additional IAs will be rather easy. I can barely believe how straightforward it looks, just looking at the code in the Processors directory. Some IAs there don't even need the Java code, to be supported.

Re: Ghidra Capabilities – Get Your Free NSA Reverse Engineering Tool [pdf]

#8

Post by beefhash » Wed, Mar 06, 2019, 5:49 PM UTC

mcpherrinm wrote: post #5

tptacek wrote: post #4

Earlier quoted context omitted.

Isn't the source code zipped up alongside the binaries?

For Java, not for native code. Fortunately we have Ghidra to look at itself?

> Fortunately we have Ghidra to look at itself?

The all-time classic “Reflections on Trusting Trust”[1] seems relevant again here.

[1] https://www.archive.ece.cmu.edu/~ganger/712.fall02/papers/p7...

Re: Ghidra Capabilities – Get Your Free NSA Reverse Engineering Tool [pdf]

#9

Post by saagarjha » Wed, Mar 06, 2019, 5:59 PM UTC

beefhash wrote: post #8

mcpherrinm wrote: post #5

Earlier quoted context omitted.

For Java, not for native code. Fortunately we have Ghidra to look at itself?

> Fortunately we have Ghidra to look at itself? The all-time classic “Reflections on Trusting Trust”[1] seems relevant again here. [1] https://www.archive.ece.cmu.edu/~ganger/712.fall02/papers/p7...

You're welcome to use Hopper/IDA Pro/Radare/Binary Ninja…

Re: Ghidra Capabilities – Get Your Free NSA Reverse Engineering Tool [pdf]

#10

Post by the_librarian » Wed, Mar 06, 2019, 6:14 PM UTC

Has anyone created a discord or IRC for this yet? I'm keen on learning a tool like this, and would love to be able to discuss it with others. If anyone wants, I will, but if that's a bad idea then let me know and I won't. Just looking to learn from others more experienced than myself!