Live data from Hacker News

Ghidra Capabilities – Get Your Free NSA Reverse Engineering Tool [pdf]

rsaconference.com

11–18 of 18 posts

Re: Ghidra Capabilities – Get Your Free NSA Reverse Engineering Tool [pdf]

#11
post #8

Earlier quoted context omitted.

For Java, not for native code. Fortunately we have Ghidra to look at itself?

> Fortunately we have Ghidra to look at itself? The all-time classic “Reflections on Trusting Trust”[1] seems relevant again here. [1] https://www.archive.ece.cmu.edu/~ganger/712.fall02/papers/p7...

That's the joke

Re: Ghidra Capabilities – Get Your Free NSA Reverse Engineering Tool [pdf]

#12
A slight offtopic question but related to this release: if you were the CEO of Hex-Rays/Hopper/Binary Ninja etc, what would you do about the release of Ghidra? It will clearly impact your business and it even might be better than your current product.

So how do you respond to Ghidra? Is there a way to leverage it?

Re: Ghidra Capabilities – Get Your Free NSA Reverse Engineering Tool [pdf]

#13

Reviews of it seem alright. Still have yet to see the source code added to the repo :)

There's enough source code provided that I was able to patch the Java code to fix a bug: https://github.com/NationalSecurityAgency/ghidra/issues/2#is...

While there's no source for the decompiler, the decompiler binaries themselves are unstripped and C++, meaning they're actually fairly straightforward to reverse. Plus, you get all the Java code that drives the decompiler binaries.

Re: Ghidra Capabilities – Get Your Free NSA Reverse Engineering Tool [pdf]

#14
I love how it integrates a built-in binary diff tool. Version Control basically lets you watch a binary as it evolves over time. This can be used to check if bugs have been patched, to inspect new code for bugs (which are often less well-tested than existing code), and to try to work out what recent patches have fixed (so you can target older versions with new exploits). IDA doesn't ship with such a feature, and plugins which do implement it are kinda clunky, so I'm excited to see what the version control feature will bring.

I am also curious as to what was left out of the public release. It's clear that not everything was included (even though there's a lot here).

Re: Ghidra Capabilities – Get Your Free NSA Reverse Engineering Tool [pdf]

#15

Has anyone created a discord or IRC for this yet? I'm keen on learning a tool like this, and would love to be able to discuss it with others. If anyone wants, I will, but if that's a bad idea then let me know and I won't. Just looking to learn from others more experienced than myself!

I would join in if something like this existed. I'm still a beginner though, so I wouldn't be able to provide a lot of guidance on how to use anything.

Re: Ghidra Capabilities – Get Your Free NSA Reverse Engineering Tool [pdf]

#16
post #15

Has anyone created a discord or IRC for this yet? I'm keen on learning a tool like this, and would love to be able to discuss it with others. If anyone wants, I will, but if that's a bad idea then let me know and I won't. Just looking to learn from others more experienced than myself!

I would join in if something like this existed. I'm still a beginner though, so I wouldn't be able to provide a lot of guidance on how to use anything.

Do you think I should put one up?

Re: Ghidra Capabilities – Get Your Free NSA Reverse Engineering Tool [pdf]

#17
post #15

Earlier quoted context omitted.

I would join in if something like this existed. I'm still a beginner though, so I wouldn't be able to provide a lot of guidance on how to use anything.

Do you think I should put one up?

Perhaps a freenode channel? ##ghidra seems to be available.
Post reply on HN