Live data from Hacker News

Ghidra, NSA's reverse-engineering tool

nsa.gov

401–410 of 425 posts

Re: Ghidra, NSA's reverse-engineering tool

#401
post #186

Earlier quoted context omitted.

They can also enforce copyright in other countries.

Can they? How's that work, surely a resident in USA could take the work to the other country and make it available, if they can't then it wasn't public domain in the first place? Can you point me to any caselaw/ analysis please?

Guns

Re: Ghidra, NSA's reverse-engineering tool

#403

Why this is important (for those uninitiated): - Ghidra is basically the first real competitor to IDA Pro, the extremely expensive and often pirated state-of-the-art software for reverse engineering. Nothing else has come close to IDA Pro. - Ghidra is open-source, IDA Pro is not. - Ghidra has a lot of really cool features that IDA Pro doesn't, such as decompiling binaries to pseudo-C code. - It's also collaborative,…

Ghidra’s source source code was not released. The only thing on Github is the Readme, the license, and some git files. The best you can likely do is use Ghidra to reverse-engineer Ghidra.

The download includes a zip file containing source code next to every jar file.

Re: Ghidra, NSA's reverse-engineering tool

#404
post #276

Just used it to solve the 2015 flare-on challenge #1. Rudimentary, but I am blown away. The interface feels better than IDA, I was able to write a python script straight away! 10/10 recommended. The python interpreter attached with it is aware of the state. Where is my cursor, what memory module I have selected etc. Easy to write scripts for

Any chance you could do a few videos tutorials on using it in conjunction with Python?

That's a great idea!! I can try.

Re: Ghidra, NSA's reverse-engineering tool

#405

Earlier quoted context omitted.

Oh also, just to clarify -- are you talking about Binary Ninja or something else? That would explain a lot of my confusion. :-P

I'm complaining about IDA. I have no complaints about BinaryNinja :-)

Yeah, sorry for being slow on the uptake there. The negative threw me off. :-P

Re: Ghidra, NSA's reverse-engineering tool

#406
post #66

From someone who does binary reverse engineering full time, in my experience, BinaryNinja, Hopper, radare2, etc are toys compared to IDA Pro + Hex Rays Decompiler. The quality of the results and the features supported are unmatched... until now. I haven’t spent too much time with ghidra yet but it’s the real deal. The output of the decompiler looks alright (not complete garbage like I’ve seen with other tools). Even…

Out of curiosity what kind of job involves doing binary reverse engineering full time?

Audits for Intellectual Property.

Too often companies pay 6 digits for a feature that some supplier rips directly from an open source on the Internet (often GPL) and then sells as his own.

Re: Ghidra, NSA's reverse-engineering tool

#408
post #50

Earlier quoted context omitted.

I think you're underestimating the value of intel on people who know how to get intel or at least interested in the topic.

It's part of the NSA's recruiting push. "If you are interested in projects like this ... consider applying" is even mentioned in the README. There's zero chance there's some secret trojan, because the people who are interested in this type of software are the exact people who would be able to find it.

>"If you are interested in projects like this ... consider applying" is even mentioned in the README.

* As long as you have citizenship... which is the minority.

Re: Ghidra, NSA's reverse-engineering tool

#409
post #271

Download: https://ghidra-sre.org/ GitHub: https://github.com/NationalSecurityAgency/ghidra

Is this available outside the US? the first link returns a 403, the second contains no code... ?

Seeing 403 (I'm in Russia). Maybe some export restrictions, but more probably just a glitch in CDN (Cloudfront). P.S. I'm not in Crimea, never encountered software export restrictions before.

Re: Ghidra, NSA's reverse-engineering tool

#410
post #129

Earlier quoted context omitted.

do you mind talking a bit about how you got into the field?

Video game console hacking. Wanted to run my own code on my console back before phones and laptops were so cheap.

Pretty much all of the seriously talented reverse engineers I've met started out hacking video games as teenagers. Also, IDK if you remember me from back in the day, but hi! ^.^
Post reply on HN