Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ghidra by NSA

github.com

Post reply on HN
Print view View original

141–150 of 231 posts

Re: Ghidra by NSA

#141

Post by barfiure »

WalterGR wrote: post #139
boricj wrote: post #136

Might as well plug in my own extension: https://github.com/boricj/ghidra-delinker-extension It's a relocatable object file exporter that supports x86/MIPS and ELF/COFF. In other words, it can delink any program selection and you can reuse the bits for various use-cases, including making new programs Mad Max -style. It carved itself a niche in the Windows decompilation community, used alongside objdiff or decomp.me.

What is Mad Max-style?

I imagine PIE chunks that you can kludge into other programs to Frankenstein implementations? Kind of like how mad max cars are made of bits and pieces bolted together

Re: Ghidra by NSA

#142

Post by GlumWoodpecker »

nazgulsenpai wrote: post #70
quux0r wrote: post #31

While on the topic, I want to highlight two incredible plugins for Ghidra: https://github.com/jtang613/GhidrAssist And https://github.com/jtang613/GhidrAssistMCP Being able to hook Claude code up to this has made reversing way more productive. Highly recommend!

https://github.com/LaurieWired/GhidraMCP is great also

The author of this has an excellent tech YouTube channel:

https://www.youtube.com/@lauriewired

Re: Ghidra by NSA

#143

Post by thenaturalist »

joe_mamba wrote: post #69
Alifatisk wrote: post #64

Earlier quoted context omitted.

There is MCPs for Ghidra

Yeah this. I saw some guys on youtube use AI MCPs to do some crazy reverse engineering. It's difficult to be an AI doomer when you see stuff like this.

Would you have a link / links or hints about the channel?

Re: Ghidra by NSA

#145

Post by j45 »

dakolli wrote: post #137

Everyone in the comments is like, "take a look at this AI tool for Ghirda" This is indicative of two things. 1. While I can't stand the guy, ya'll need to watch Peter Thiel's talk from 10-15 years ago at Stanford about not building the same thing everyone else is, a la, the obvious thing. 2. People are really attracted to using LLMs on deep thinking tasks, off shoring their thinking, to a "Think for me SaaS". This wo…

A VC might want variety and advise people he will vote with his dollars for variety, because he's not funding the same thing as everyone else is.

Being first and the winner requires a lot to line up, so it shouldn't be the only, default, or best setting. Pursuing this is optimizing.

Also a message from 10-15 years ago might not reflect the same context as today.

Re: Ghidra by NSA

#146

Post by boricj »

barfiure wrote: post #141
WalterGR wrote: post #139

Earlier quoted context omitted.

What is Mad Max-style?

I imagine PIE chunks that you can kludge into other programs to Frankenstein implementations? Kind of like how mad max cars are made of bits and pieces bolted together

Indeed, you can kludge anything together into working chimeras, as long as you can mend the ABIs together.

I've done a case study where I've ported a Linux a.out program into a native Windows PE program without source code: https://boricj.net/atari-jaguar-sdk/2023/11/27/introduction....

Another case study was ripping the archive code from a PlayStation game and stuffing it into a Linux MIPS program to create an asset extractor: https://boricj.net/tenchu1/2024/03/18/part-6.html

Re: Ghidra by NSA

#147

Post by resonious »

dakolli wrote: post #137

Everyone in the comments is like, "take a look at this AI tool for Ghirda" This is indicative of two things. 1. While I can't stand the guy, ya'll need to watch Peter Thiel's talk from 10-15 years ago at Stanford about not building the same thing everyone else is, a la, the obvious thing. 2. People are really attracted to using LLMs on deep thinking tasks, off shoring their thinking, to a "Think for me SaaS". This wo…

This feels like a bit of a false dichotomy. Just because I give some thinking tasks to an AI doesn't mean I'm sitting there doing nothing while it thinks.

Re: Ghidra by NSA

#148

Post by baby_souffle »

palata wrote: post #97
baby_souffle wrote: post #54

Earlier quoted context omitted.

> Taking the opportunity to ask: are there nice recommended resources for a beginner to start with reverse engineering (ideally using Ghidra)? Let's say for an experienced developer, but not so experienced in reverse engineering? The good news is that there has never been MORE resources out there. If you want to use this learning expedition as an excuse to also build up a small electronics lab then $100 on ali expres…

Oh, it feels like it may be what I want! Find some cheap electronic device and hack it! Thanks a lot!

I would also suggest spending a few minutes to set up an mCP server with ghidra once you've learned the basics of navigating and working inside of ghidra.

Turns out that frontier grade llms are absolutely fantastic for extremely advanced static analysis. If you go one step further and manage to get your firmware running inside of an emulator or other place where you can attach GDB... Then putting an mCP server on that as well unlocks so much insane potential.

Re: Ghidra by NSA

#149

Post by SuperNinKenDo »

resonious wrote: post #147
dakolli wrote: post #137

Everyone in the comments is like, "take a look at this AI tool for Ghirda" This is indicative of two things. 1. While I can't stand the guy, ya'll need to watch Peter Thiel's talk from 10-15 years ago at Stanford about not building the same thing everyone else is, a la, the obvious thing. 2. People are really attracted to using LLMs on deep thinking tasks, off shoring their thinking, to a "Think for me SaaS". This wo…

This feels like a bit of a false dichotomy. Just because I give some thinking tasks to an AI doesn't mean I'm sitting there doing nothing while it thinks.

I'd say _this_ is the comment guilty of making a false dichotomy.
Post reply on HN