#ghidra — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #ghidra, aggregated by home.social.
-
*sigh* things rarely work out the way they should in my head, couldn't find the bit patterns I worked out that should correspond to the representations of digits on the seven-segment displays. I think I'm going to pivot again to implementing a simulator for time machine in PinMAME so I can shoot shots with the keyboard and see what happens in the debugger
#MAME #Debugger #Pinball #Ghidra #Disassembly #ReverseEngineering
-
Another detour on the Time Machine #Pinball #disassembly project, I think the processor specification I've been using is incomplete. There are a lot of instances of indexed addressing being interpreted as an offset from the current address. This is making it hard to figure out where in RAM different pieces of data live without manually calculating the address.
Time to learn #Sleigh and patch the processor definition. Maybe the extension author will even accept a pull request.
-
Cool. After my productivity speedbump of last night, my Time Machine #pinball #disassembly project has moved forward. I now have a python script which exports the #ghidra program into an info file which a real 6800 disassembler reads to produce assembly which should actually be able to be reassembled into a final binary.
I'll use ghidra to continue analyzing the code, and when I'm ready to actually start writing my own patches, I'll do that outside of ghidra as though it were a source file.
-
Perusing the #documentation for JPype as it's the translation layer letting me write my #Ghidra script in #Python, and I'm enjoying the conversational style of the introduction in the user guide
https://jpype.readthedocs.io/en/latest/userguide.html#case-1-access-to-a-java-library
-
Haven't worked on my #Pinball code #disassembly much directly, but I have been working to get all the tools I need collected. It seems like once I've used #Ghidra to annotate and explore the code I'll want to bring the disassembled "source" into a real editor to actually make my changes.
To ensure the actual disassembly is compatible with assembling back to EPROM images, I plan to write a script to convert ghidra's code representation into a file that will drive a dedicated 68xx disassembler
-
I sucessfully reverse engineered #WorldOfWarcraft 3.3.5a to fix the awful scaling of the damage numbers that was bothering me since ever.
Turns out, they have a flag called `EGxStringFlags_FixedSize` which wasn't used. It disables the scaling and makes the numbers appear a little smaller but crystal clear! Wohoo!
-
A rich #training #offer at BSides Milano we have top-notch trainings, in some case for the first time in #Italy! All #in-person! The #event will be held from 4 to 8 July 2023. From 4 to 7 we will be focus on #learnitall on the 8 we will deep dive in our #amazing #conference. Ticket will be available from tonight for the trainings. We have an early bird rate until 30th April.
Are you ready? We are!! join our group SecurityBsidesItalia #linkedin or on #discord https://lnkd.in/dBu7wkJG for detailed info! #cyber #threatintelligence #threatintel #cloud #redteaming #redteam #blueteam #threathunting #exploitation #secureboot #TTE #multicloud #hybridcloud #voip #Linux #Windows #LTE #baseband #deception #detection #evasion #edr #BSML23 #AWS #Azure #AzureAD #GCP #devops #cicd #RTOS #FalseFlag #HoneyNet #IDAPro #Python #reverseengineering #Ghidra #network #MITRE #TTPs #persistence #commandandcontrol #lateralmovement #osint #obfuscation #malware #malwareanalysis .
Reserve your your spot!! https://lnkd.in/dZf-yyPv