Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ghidra: A software reverse engineering suite of tools developed by the NSA

ghidra-sre.org

Post reply on HN
Print view View original

81–90 of 147 posts

Re: Ghidra: A software reverse engineering suite of tools developed by the NSA

#81

Post by nix23 »

aj3 wrote: post #75
nix23 wrote: post #66

Earlier quoted context omitted.

>NSA isn’t some magical unicorn With unlimited money and the given job to crack encryption, hack into systems and secure the networks of the wealthiest nation and only superpower on earth atm. It IS pretty much a unicorn, and i am pretty sure they are +20 years in the future technology-wise, and with that: >>Arthur C. Clarke — 'Magic's just science that we don't understand yet.' So yes Magic Unicorn describes the NSA…

Yeah, that's bullshit. For NSA-proof personal tech stack you'd rely more on tamper-evident blocks that's all. Also, security in depth and security through obscurity are much more applicable if you're a person and not an organization. Finally, +20 years head start does not mean much if you distrohop and FOMO into bleeding edge stuff like a tech podcaster.

Not sure if you know what your talking about, you sound a bit like a bot #NSA-proof #distrohop

Re: Ghidra: A software reverse engineering suite of tools developed by the NSA

#82

Post by aj3 »

nix23 wrote: post #81
aj3 wrote: post #75

Earlier quoted context omitted.

Yeah, that's bullshit. For NSA-proof personal tech stack you'd rely more on tamper-evident blocks that's all. Also, security in depth and security through obscurity are much more applicable if you're a person and not an organization. Finally, +20 years head start does not mean much if you distrohop and FOMO into bleeding edge stuff like a tech podcaster.

Not sure if you know what your talking about, you sound a bit like a bot #NSA-proof #distrohop

In case you're genuinely curious, 'NSA-proof' is a portmanteau from NSA and 'idiot-proof'. Distrohopping is when people change (usually GNU/Linux) distributions once a month or so (which is an allusion at tongue-in-cheek conjecture that one can change distributions faster than NSA can break them). Have a good day, fellow human.

Re: Ghidra: A software reverse engineering suite of tools developed by the NSA

#83

Post by bccdee »

croes wrote: post #74
aj3 wrote: post #68

Earlier quoted context omitted.

But it's hosted on Github. And some distros have ghidra in official repos.

Is Snowden already forgotten? Doesn't matter where it's hosted, NSA still knows who downloaded it.

Insofar as they know everything anyone downloads from Github, sure.

Re: Ghidra: A software reverse engineering suite of tools developed by the NSA

#84

Post by nix23 »

aj3 wrote: post #82
nix23 wrote: post #81

Earlier quoted context omitted.

Not sure if you know what your talking about, you sound a bit like a bot #NSA-proof #distrohop

In case you're genuinely curious, 'NSA-proof' is a portmanteau from NSA and 'idiot-proof'. Distrohopping is when people change (usually GNU/Linux) distributions once a month or so (which is an allusion at tongue-in-cheek conjecture that one can change distributions faster than NSA can break them). Have a good day, fellow human.

>one can change distributions faster than NSA can break them

Oh man i don't know what to say. Does one distrohop the ssd/efi/net/wireless/keyboard/etc-firmware too?

One distrohoped for 15 years and that vuln existed all the time..but hey it would be just that one...it's an exception right? ;)

https://securityaffairs.co/wordpress/115565/security/linux-k...

How many completely different browsers exist? And how many local exploitable user to root exploits exist in the Apple/Linux/BSD world's? If your a valued target and you are connected to a network you WILL be hacked.

Re: Ghidra: A software reverse engineering suite of tools developed by the NSA

#86

Post by ktpsns »

xvilka wrote: post #39

If you want to harness the power of Ghidra decompiler but without the need of installing Java - Rizin[1][2] and Cutter[3][4] (Rizin's Qt GUI) integrate Ghidra's decompiler part that is written in C++ (libdecomp) as plugin - rz-ghidra[5]. We work currently on improving the integration and the quality of output. [1] https://rizin.re [2] https://github.com/rizinorg/rizin [3] https://cutter.re [4] https://github.com/rizi…

These two tools have so much better websites as Ghidra. Thanks for putting the links!

Re: Ghidra: A software reverse engineering suite of tools developed by the NSA

#87

Post by e12e »

beefcafe wrote: post #10
robthebrew wrote: post #5

I'm not sure why this is news. It is an amazing bit of kit, and cross platform. I've been using g it for many months now and highly recommend it.

Probably because a new version was just released. Details here* but big news is debugger support. Looking forward to taking it for a spin. https://htmlpreview.github.io/?https://github.com/NationalSe...

These are great release notes - I think quite a few Foss projects could draw some inspiration here.

Re: Ghidra: A software reverse engineering suite of tools developed by the NSA

#88

Post by aj3 »

nix23 wrote: post #84
aj3 wrote: post #82

Earlier quoted context omitted.

In case you're genuinely curious, 'NSA-proof' is a portmanteau from NSA and 'idiot-proof'. Distrohopping is when people change (usually GNU/Linux) distributions once a month or so (which is an allusion at tongue-in-cheek conjecture that one can change distributions faster than NSA can break them). Have a good day, fellow human.

>one can change distributions faster than NSA can break them Oh man i don't know what to say. Does one distrohop the ssd/efi/net/wireless/keyboard/etc-firmware too? One distrohoped for 15 years and that vuln existed all the time..but hey it would be just that one...it's an exception right? ;) https://securityaffairs.co/wordpress/115565/security/linux-k... How many completely different browsers exist? And how many loc…

Buddy, I'm not gonna follow this thread anymore because you seem to be baiting me to read you a lecture on OPSEC, security in depth and compartmentalization.

Re: Ghidra: A software reverse engineering suite of tools developed by the NSA

#89

Post by orra »

xvilka wrote: post #53
vesche wrote: post #50

Earlier quoted context omitted.

For anyone confused (as I was) rizin is a fork of radare2. I don't have anything constructive to say other than I'm confused why the project was forked.

The reasons behind the fork are described in our FAQ[1]. TLDR: we removed everything irrelevant, not working, rewrote some pieces completely, focus on maintainability, cleaner code, easier onboarding of new contributors, better code documentation (Doxygen), better API and testing. [1] https://rizin.re/posts/faq/

Creating a welcoming, and not a hostile, environment was on its own a good enough reason to fork.

But also. Cutter is the first time that either Rizin or Radare has been simple enough for me, an entry level RE enthusiast, to use. So thanks.

Re: Ghidra: A software reverse engineering suite of tools developed by the NSA

#90

Post by homarp »

motohagiography wrote: post #27

I used this again just the other day with the cantor.dust plugin. My rev.eng skills are dull and were never great to begin with, but for anything below a real APT with obfuscation, runtime decoding and unpacking, Ghidra is an equalizer. Between this and Chef from gchq, someone with devops skills can probably skill up to an entry level threat analyst level in a few weeks or months. The tooling available today is reall…

Chef from gchq refers to https://github.com/gchq/CyberChef
Post reply on HN