#ghidra — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #ghidra, aggregated by home.social.
-
#TIL about #Ghidra:
It might be that the decompile view shows you
```
void foo(void)
{
/* ... */
}
```
and yet, you see in another function calling it smth like
```
iVar1 = foo();
```
- leaving you puzzled.
It looks like a bug!In the disassembly view and in the function signature editor, you would see the return type `undefined`, and you would need to adjust it.
-
#TIL about #Ghidra:
It might be that the decompile view shows you
```
void foo(void)
{
/* ... */
}
```
and yet, you see in another function calling it smth like
```
iVar1 = foo();
```
- leaving you puzzled.
It looks like a bug!In the disassembly view and in the function signature editor, you would see the return type `undefined`, and you would need to adjust it.
-
If you have a pointer to a pointer to a struct, you define that struct and assign the type to it, then you also need to adjust the intermediate pointer in #Ghidra and vroom vroom, you finally get to see the struct and its member just fine in the decompile view.
See also:
https://github.com/NationalSecurityAgency/ghidra/issues/2946 -
If you have a pointer to a pointer to a struct, you define that struct and assign the type to it, then you also need to adjust the intermediate pointer in #Ghidra and vroom vroom, you finally get to see the struct and its member just fine in the decompile view.
See also:
https://github.com/NationalSecurityAgency/ghidra/issues/2946 -
If you have a pointer to a pointer to a struct, you define that struct and assign the type to it, then you also need to adjust the intermediate pointer in #Ghidra and vroom vroom, you finally get to see the struct and its member just fine in the decompile view.
See also:
https://github.com/NationalSecurityAgency/ghidra/issues/2946 -
If you have a pointer to a pointer to a struct, you define that struct and assign the type to it, then you also need to adjust the intermediate pointer in #Ghidra and vroom vroom, you finally get to see the struct and its member just fine in the decompile view.
See also:
https://github.com/NationalSecurityAgency/ghidra/issues/2946 -
If you have a pointer to a pointer to a struct, you define that struct and assign the type to it, then you also need to adjust the intermediate pointer in #Ghidra and vroom vroom, you finally get to see the struct and its member just fine in the decompile view.
See also:
https://github.com/NationalSecurityAgency/ghidra/issues/2946 -
Another week, another #WeeklyBrainDump done!
- Ghidra experimentation, looking to decompile an older game
- Building desktop applications with NeutralinoJShttps://sean.taylormadetech.dev/2026/07/09/weekly-brain-dump-30.html
-
Another week, another #WeeklyBrainDump done!
- Ghidra experimentation, looking to decompile an older game
- Building desktop applications with NeutralinoJShttps://sean.taylormadetech.dev/2026/07/09/weekly-brain-dump-30.html
-
Another week, another #WeeklyBrainDump done!
- Ghidra experimentation, looking to decompile an older game
- Building desktop applications with NeutralinoJShttps://sean.taylormadetech.dev/2026/07/09/weekly-brain-dump-30.html
-
Ghidra — фреймворк АНБ для реверс-инжиниринга ПО
Ghidra — это фреймворк для реверс-инжиниринга, который создан и поддерживается АНБ. Как выяснилось, агенты эффективно применяют Ghidra через MCP-сервер GhidraMCP , а с декомпилятором Radare2 это позволяет находить закладки в бинарных файлах почти в автоматическом режиме. В бенчмарках Claude Opus 4.6 нашёл 49% бэкдоров, Gemini 3 Pro — 44%, а Claude Opus 4.5 — 37%.
https://habr.com/ru/companies/globalsign/articles/1055806/
#Ghidra #реверсинжиниринг #обратная_разработка #PyGhidra #GhidraMCP #MCPсервер #IDA_Pro #Binary_Ninja #GhidrAssist #GhidrAssistMCP
-
Ghidra — фреймворк АНБ для реверс-инжиниринга ПО
Ghidra — это фреймворк для реверс-инжиниринга, который создан и поддерживается АНБ. Как выяснилось, агенты эффективно применяют Ghidra через MCP-сервер GhidraMCP , а с декомпилятором Radare2 это позволяет находить закладки в бинарных файлах почти в автоматическом режиме. В бенчмарках Claude Opus 4.6 нашёл 49% бэкдоров, Gemini 3 Pro — 44%, а Claude Opus 4.5 — 37%.
https://habr.com/ru/companies/globalsign/articles/1055806/
#Ghidra #реверсинжиниринг #обратная_разработка #PyGhidra #GhidraMCP #MCPсервер #IDA_Pro #Binary_Ninja #GhidrAssist #GhidrAssistMCP
-
Ghidra — фреймворк АНБ для реверс-инжиниринга ПО
Ghidra — это фреймворк для реверс-инжиниринга, который создан и поддерживается АНБ. Как выяснилось, агенты эффективно применяют Ghidra через MCP-сервер GhidraMCP , а с декомпилятором Radare2 это позволяет находить закладки в бинарных файлах почти в автоматическом режиме. В бенчмарках Claude Opus 4.6 нашёл 49% бэкдоров, Gemini 3 Pro — 44%, а Claude Opus 4.5 — 37%.
https://habr.com/ru/companies/globalsign/articles/1055806/
#Ghidra #реверсинжиниринг #обратная_разработка #PyGhidra #GhidraMCP #MCPсервер #IDA_Pro #Binary_Ninja #GhidrAssist #GhidrAssistMCP
-
[RSS] When Dragons Misplace Elves: Fixing Ghidra's Broken ELF Export
https://binaryru.in/posts/building-functional-elf-exporter-for-ghidra/
#Ghidra -
[RSS] When Dragons Misplace Elves: Fixing Ghidra's Broken ELF Export
https://binaryru.in/posts/building-functional-elf-exporter-for-ghidra/
#Ghidra -
[RSS] When Dragons Misplace Elves: Fixing Ghidra's Broken ELF Export
https://binaryru.in/posts/building-functional-elf-exporter-for-ghidra/
#Ghidra -
[RSS] When Dragons Misplace Elves: Fixing Ghidra's Broken ELF Export
https://binaryru.in/posts/building-functional-elf-exporter-for-ghidra/
#Ghidra -
[RSS] When Dragons Misplace Elves: Fixing Ghidra's Broken ELF Export
https://binaryru.in/posts/building-functional-elf-exporter-for-ghidra/
#Ghidra -
[Перевод] Ghidra для реверса прошивок: практический гайд по восстановлению логики бинарника
В прошивках редко есть удобные символы и понятная точка входа, зато почти всегда остаются следы: строки, таблицы адресов, магические значения, обработчики прерываний и вызовы RTOS. Разбираем, как использовать эти зацепки в Ghidra, чтобы постепенно превратить сырой бинарник в осмысленную карту функций, данных и связей между ними. Понять Ghidra
https://habr.com/ru/companies/otus/articles/1051478/
#реверсинжиниринг #Ghidra #прошивки #анализ_бинарников #FreeRTOS #RTOS #декомпиляция #ассемблер #BSim
-
[Перевод] Ghidra для реверса прошивок: практический гайд по восстановлению логики бинарника
В прошивках редко есть удобные символы и понятная точка входа, зато почти всегда остаются следы: строки, таблицы адресов, магические значения, обработчики прерываний и вызовы RTOS. Разбираем, как использовать эти зацепки в Ghidra, чтобы постепенно превратить сырой бинарник в осмысленную карту функций, данных и связей между ними. Понять Ghidra
https://habr.com/ru/companies/otus/articles/1051478/
#реверсинжиниринг #Ghidra #прошивки #анализ_бинарников #FreeRTOS #RTOS #декомпиляция #ассемблер #BSim
-
[Перевод] Ghidra для реверса прошивок: практический гайд по восстановлению логики бинарника
В прошивках редко есть удобные символы и понятная точка входа, зато почти всегда остаются следы: строки, таблицы адресов, магические значения, обработчики прерываний и вызовы RTOS. Разбираем, как использовать эти зацепки в Ghidra, чтобы постепенно превратить сырой бинарник в осмысленную карту функций, данных и связей между ними. Понять Ghidra
https://habr.com/ru/companies/otus/articles/1051478/
#реверсинжиниринг #Ghidra #прошивки #анализ_бинарников #FreeRTOS #RTOS #декомпиляция #ассемблер #BSim
-
I hear a lot of ppl rightfully complain about the looks of #Ghidra.
I recently started using themes (which are just text files with color codes, as it should be) and even though I'm not at all picky about these things OMG it's so much better now! -
I hear a lot of ppl rightfully complain about the looks of #Ghidra.
I recently started using themes (which are just text files with color codes, as it should be) and even though I'm not at all picky about these things OMG it's so much better now! -
I hear a lot of ppl rightfully complain about the looks of #Ghidra.
I recently started using themes (which are just text files with color codes, as it should be) and even though I'm not at all picky about these things OMG it's so much better now! -
I hear a lot of ppl rightfully complain about the looks of #Ghidra.
I recently started using themes (which are just text files with color codes, as it should be) and even though I'm not at all picky about these things OMG it's so much better now! -
I hear a lot of ppl rightfully complain about the looks of #Ghidra.
I recently started using themes (which are just text files with color codes, as it should be) and even though I'm not at all picky about these things OMG it's so much better now! -
ReVa 7.3.0 is released! ✨
- Support for binary diffing and version tracking. A lot of time optimizing this for the LLM to work on small and large binaries 🫠
- Support for background analysis (useful for large firmware!)https://github.com/cyberkaida/reverse-engineering-assistant/releases
-
ReVa 7.3.0 is released! ✨
- Support for binary diffing and version tracking. A lot of time optimizing this for the LLM to work on small and large binaries 🫠
- Support for background analysis (useful for large firmware!)https://github.com/cyberkaida/reverse-engineering-assistant/releases
-
ReVa 7.3.0 is released! ✨
- Support for binary diffing and version tracking. A lot of time optimizing this for the LLM to work on small and large binaries 🫠
- Support for background analysis (useful for large firmware!)https://github.com/cyberkaida/reverse-engineering-assistant/releases
-
After being stupid and deleting everything that I collected in my previous attempts to reverse engineer Origin's 1995 game CyberMage: Darklight Awakening, I took the release of #Fable 5 as motivation to start over, but this time fully automated, with the agent controlling headless #Ghidra.
tl;dr: Fable does very much NOT like to patch binaries, not even 30 year old DOS EXEs. 🤣
-
After being stupid and deleting everything that I collected in my previous attempts to reverse engineer Origin's 1995 game CyberMage: Darklight Awakening, I took the release of #Fable 5 as motivation to start over, but this time fully automated, with the agent controlling headless #Ghidra.
tl;dr: Fable does very much NOT like to patch binaries, not even 30 year old DOS EXEs. 🤣
-
After being stupid and deleting everything that I collected in my previous attempts to reverse engineer Origin's 1995 game CyberMage: Darklight Awakening, I took the release of #Fable 5 as motivation to start over, but this time fully automated, with the agent controlling headless #Ghidra.
tl;dr: Fable does very much NOT like to patch binaries, not even 30 year old DOS EXEs. 🤣
-
📣🚨 Watch out as hackers are cloning Ghidra, dnSpy, ILSpy and other free tool sites to spread malware through fake downloads, including RemusStealer, crypto clippers and loaders.
Read: https://hackread.com/hackers-clone-ghidra-dnspy-tool-sites-spread-malware/
-
📣🚨 Watch out as hackers are cloning Ghidra, dnSpy, ILSpy and other free tool sites to spread malware through fake downloads, including RemusStealer, crypto clippers and loaders.
Read: https://hackread.com/hackers-clone-ghidra-dnspy-tool-sites-spread-malware/
-
📣🚨 Watch out as hackers are cloning Ghidra, dnSpy, ILSpy and other free tool sites to spread malware through fake downloads, including RemusStealer, crypto clippers and loaders.
Read: https://hackread.com/hackers-clone-ghidra-dnspy-tool-sites-spread-malware/
-
📣🚨 Watch out as hackers are cloning Ghidra, dnSpy, ILSpy and other free tool sites to spread malware through fake downloads, including RemusStealer, crypto clippers and loaders.
Read: https://hackread.com/hackers-clone-ghidra-dnspy-tool-sites-spread-malware/
-
📣🚨 Watch out as hackers are cloning Ghidra, dnSpy, ILSpy and other free tool sites to spread malware through fake downloads, including RemusStealer, crypto clippers and loaders.
Read: https://hackread.com/hackers-clone-ghidra-dnspy-tool-sites-spread-malware/
-
🚨 #Google piégé ? Ce script invisible infecte les utilisateurs d'outils open source
https://goodtech.info/google-recherche-malware-faux-sites-open-source-click-hijacking/
> Attention où vous cliquez ! 🚨 Une gigantesque campagne cyber usurpe l'identité de projets open source célèbres (#Ghidra, #SpiderFoot) directement sur Google. Grâce à un script invisible, le bouton de téléchargement vous pirate même si le lien affiché pointe vers le vrai GitHub. On vous dévoile les coulisses de ce piège diabolique 👇
