Ghidra was released 2 years ago. Am I missing something?
version 10 recently came out, now featuring a debugger
Ghidra: A software reverse engineering suite of tools developed by the NSA
51–60 of 147 posts
Re: Ghidra: A software reverse engineering suite of tools developed by the NSA
#52Ghidra is a very cool utility. I used it to disassemble StarGlider for DOS - a very old fav - to figure out how the game worked. Together with the DosBox debugger I managed to create my own hack so I could play the game without being killed the whole time.
Re: Ghidra: A software reverse engineering suite of tools developed by the NSA
#53If you want to harness the power of Ghidra decompiler but without the need of installing Java - Rizin[1][2] and Cutter[3][4] (Rizin's Qt GUI) integrate Ghidra's decompiler part that is written in C++ (libdecomp) as plugin - rz-ghidra[5]. We work currently on improving the integration and the quality of output. [1] https://rizin.re [2] https://github.com/rizinorg/rizin [3] https://cutter.re [4] https://github.com/rizi…
For anyone confused (as I was) rizin is a fork of radare2. I don't have anything constructive to say other than I'm confused why the project was forked.
The reasons behind the fork are described in our FAQ[1]. TLDR: we removed everything irrelevant, not working, rewrote some pieces completely, focus on maintainability, cleaner code, easier onboarding of new contributors, better code documentation (Doxygen), better API and testing.
Re: Ghidra: A software reverse engineering suite of tools developed by the NSA
#54Earlier quoted context omitted.
If they could install a virus on Iran's air-gapped uranium centrifuge industrial control systems, I'm pretty sure they could get one on your computer.
Bribing people in generally corrupt and poor countries to smuggle a USB stick is kind a different than just breaking into random persons home in a country with relatively low corruption. Latter might actually be more difficult. Obviously depends on what your end goal is
Passing an infected USB stick to operators in poorer countries (as you say) is hardly the most impressive part of the deployment procedure.
Re: Ghidra: A software reverse engineering suite of tools developed by the NSA
#55Earlier quoted context omitted.
I don't think there is anything fishy here, although I don't think the NSA can just install anything on my computer, even if I were based in the US. There is a lot of bluffing when it comes to cyber security. Still it might be quite a useful tool.
I’m quite sure they could, but mostly just because they could simply walk into your house and tamper with the hardware. You don’t need a fancy zero day when you’re the government.
Funny thing about lockdown/wfh4l... they're really gonna wait a while to get in
Re: Ghidra: A software reverse engineering suite of tools developed by the NSA
#56Earlier quoted context omitted.
Some people like me, can hear data movement on PCB's. The electrical circuit has noise signatures which change if other data is injected by Ethernet over powerline equipment. The distance from which this works is quite large, up to a few houses with consumer hardware. Fear equipment with built-in LoFi.. that's reachable without cooperation of LAN equipment..
When you say you can “hear data movement on PCBs”, do you mean you have some kind of superhuman ability, or that you know how to use some combination of instrumentation and analysis to “hear” the data?
I assumed he was talking about the noise inductors and transformers make. Like how you can hear the power transformers on telephone poles.
Re: Ghidra: A software reverse engineering suite of tools developed by the NSA
#57Earlier quoted context omitted.
Bribing people in generally corrupt and poor countries to smuggle a USB stick is kind a different than just breaking into random persons home in a country with relatively low corruption. Latter might actually be more difficult. Obviously depends on what your end goal is
Passing an infected USB stick to operators in poorer countries (as you say) is hardly the most impressive part of the deployment procedure.
but literally the most important when you need to attack air gapped machine
Re: Ghidra: A software reverse engineering suite of tools developed by the NSA
#58Earlier quoted context omitted.
Passing an infected USB stick to operators in poorer countries (as you say) is hardly the most impressive part of the deployment procedure.
but literally the most important when you need to attack air gapped machine
No, it's not the most important.
The most important was clearly obtaining the PLC zero days to infect the physical machines. It's unclear to me why you choose to be so explicitly obtuse but in any case, for your own personal edification, feel free to read some details on how it went down -
[0] https://www.wikiwand.com/en/Stuxnet
[1] https://www.wired.com/2014/11/countdown-to-zero-day-stuxnet/
Re: Ghidra: A software reverse engineering suite of tools developed by the NSA
#59Earlier quoted context omitted.
>although I don't think the NSA can just install anything on my computer If it's not connected to a network you are probably right....otherwise 100% wrong, if your a enough valuable target. And just lets say for fun your OS is 100% bulletproof, your +30 firmware's are not.
What’s with the doomer mentality. NSA isn’t some magical unicorn that can just walk through everything
They kind of are though. If you have a LOT of money, time, and personnel -- and they do -- you can find a lot of vulnerabilities.
Re: Ghidra: A software reverse engineering suite of tools developed by the NSA
#60It is open source software and it can reverse engineer programs from a lot of different systems. Some people may be worried about installing a piece of software on their computer that comes from the NSA. I don't think that there are real reasons to worry. One of the tasks of the NSA is defending against cyber attacks. Having more people with good tools helps the defense. Also, you can be pretty certain that some secu…
I don't think there is anything fishy here, although I don't think the NSA can just install anything on my computer, even if I were based in the US. There is a lot of bluffing when it comes to cyber security. Still it might be quite a useful tool.
I guarantee that whatever browser you use, they have 0day for it. Whatever ISP you use, they can inject traffic into it, and they have a much easier time about it if you aren't in the US.
If you're someone who uses the Internet, the NSA can take over whatever you use to browse with and have their way with it. If you don't, well that's what their interdiction program is for.
The thing is though, the economics of 0day indicate that the more you use it, the more likely it is that it'll get burnt, and supply is limited.
They can certainly hack anyone, but it doesn't scale, so they can't simply hack everyone. They can maybe use these techniques on a handful of targets per year, so they make it count, but most of their intelligence comes from the data we all give away for free every day.