#ghidra — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #ghidra, aggregated by home.social.
-
Sometimes, #Ghidra gets really creative.
Tons of parameters and 7x pointer derefs... whaaaat... 😹 -
Sometimes, #Ghidra gets really creative.
Tons of parameters and 7x pointer derefs... whaaaat... 😹 -
#TIL about #Ghidra:
It might be that the decompile view shows you
```
void foo(void)
{
/* ... */
}
```
and yet, you see in another function calling it smth like
```
iVar1 = foo();
```
- leaving you puzzled.
It looks like a bug!In the disassembly view and in the function signature editor, you would see the return type `undefined`, and you would need to adjust it.
-
#TIL about #Ghidra:
It might be that the decompile view shows you
```
void foo(void)
{
/* ... */
}
```
and yet, you see in another function calling it smth like
```
iVar1 = foo();
```
- leaving you puzzled.
It looks like a bug!In the disassembly view and in the function signature editor, you would see the return type `undefined`, and you would need to adjust it.
-
If you have a pointer to a pointer to a struct, you define that struct and assign the type to it, then you also need to adjust the intermediate pointer in #Ghidra and vroom vroom, you finally get to see the struct and its member just fine in the decompile view.
See also:
https://github.com/NationalSecurityAgency/ghidra/issues/2946 -
If you have a pointer to a pointer to a struct, you define that struct and assign the type to it, then you also need to adjust the intermediate pointer in #Ghidra and vroom vroom, you finally get to see the struct and its member just fine in the decompile view.
See also:
https://github.com/NationalSecurityAgency/ghidra/issues/2946 -
Another week, another #WeeklyBrainDump done!
- Ghidra experimentation, looking to decompile an older game
- Building desktop applications with NeutralinoJShttps://sean.taylormadetech.dev/2026/07/09/weekly-brain-dump-30.html
-
Another week, another #WeeklyBrainDump done!
- Ghidra experimentation, looking to decompile an older game
- Building desktop applications with NeutralinoJShttps://sean.taylormadetech.dev/2026/07/09/weekly-brain-dump-30.html
-
Ghidra — фреймворк АНБ для реверс-инжиниринга ПО
Ghidra — это фреймворк для реверс-инжиниринга, который создан и поддерживается АНБ. Как выяснилось, агенты эффективно применяют Ghidra через MCP-сервер GhidraMCP , а с декомпилятором Radare2 это позволяет находить закладки в бинарных файлах почти в автоматическом режиме. В бенчмарках Claude Opus 4.6 нашёл 49% бэкдоров, Gemini 3 Pro — 44%, а Claude Opus 4.5 — 37%.
https://habr.com/ru/companies/globalsign/articles/1055806/
#Ghidra #реверсинжиниринг #обратная_разработка #PyGhidra #GhidraMCP #MCPсервер #IDA_Pro #Binary_Ninja #GhidrAssist #GhidrAssistMCP
-
[RSS] When Dragons Misplace Elves: Fixing Ghidra's Broken ELF Export
https://binaryru.in/posts/building-functional-elf-exporter-for-ghidra/
#Ghidra -
[RSS] When Dragons Misplace Elves: Fixing Ghidra's Broken ELF Export
https://binaryru.in/posts/building-functional-elf-exporter-for-ghidra/
#Ghidra -
[Перевод] Ghidra для реверса прошивок: практический гайд по восстановлению логики бинарника
В прошивках редко есть удобные символы и понятная точка входа, зато почти всегда остаются следы: строки, таблицы адресов, магические значения, обработчики прерываний и вызовы RTOS. Разбираем, как использовать эти зацепки в Ghidra, чтобы постепенно превратить сырой бинарник в осмысленную карту функций, данных и связей между ними. Понять Ghidra
https://habr.com/ru/companies/otus/articles/1051478/
#реверсинжиниринг #Ghidra #прошивки #анализ_бинарников #FreeRTOS #RTOS #декомпиляция #ассемблер #BSim
-
I hear a lot of ppl rightfully complain about the looks of #Ghidra.
I recently started using themes (which are just text files with color codes, as it should be) and even though I'm not at all picky about these things OMG it's so much better now! -
I hear a lot of ppl rightfully complain about the looks of #Ghidra.
I recently started using themes (which are just text files with color codes, as it should be) and even though I'm not at all picky about these things OMG it's so much better now! -
ReVa 7.3.0 is released! ✨
- Support for binary diffing and version tracking. A lot of time optimizing this for the LLM to work on small and large binaries 🫠
- Support for background analysis (useful for large firmware!)https://github.com/cyberkaida/reverse-engineering-assistant/releases
-
📣🚨 Watch out as hackers are cloning Ghidra, dnSpy, ILSpy and other free tool sites to spread malware through fake downloads, including RemusStealer, crypto clippers and loaders.
Read: https://hackread.com/hackers-clone-ghidra-dnspy-tool-sites-spread-malware/
-
📣🚨 Watch out as hackers are cloning Ghidra, dnSpy, ILSpy and other free tool sites to spread malware through fake downloads, including RemusStealer, crypto clippers and loaders.
Read: https://hackread.com/hackers-clone-ghidra-dnspy-tool-sites-spread-malware/
-
Binary extension packages for #Ghidra 12+ are now automatically generated for my XCOFF Loader:
https://github.com/silentsignal/xcoff-ghidra/releases/tag/12
#AIX -
Binary extension packages for #Ghidra 12+ are now automatically generated for my XCOFF Loader:
https://github.com/silentsignal/xcoff-ghidra/releases/tag/12
#AIX -
"a regression was discovered in the #Ghidra Server, so the 12.1.1 download has been disabled. Be on the lookout for a 12.1.2 in the coming days"
https://old.reddit.com/r/ghidra/comments/1tr5qy4/ghidra_1211_has_been_released/oolygdy/ -
"a regression was discovered in the #Ghidra Server, so the 12.1.1 download has been disabled. Be on the lookout for a 12.1.2 in the coming days"
https://old.reddit.com/r/ghidra/comments/1tr5qy4/ghidra_1211_has_been_released/oolygdy/ -
Malware hunting and new ReVa release demo live at https://twitch.tv/cyberkaida
-
Malware hunting and new ReVa release demo live at https://twitch.tv/cyberkaida
-
#Ghidra 12.1 is out, changes:
https://github.com/NationalSecurityAgency/ghidra/blob/Ghidra_12.1_build/Ghidra/Configurations/Public_Release/src/global/docs/ChangeHistory.md
My first contribution (#6827) landed after *checks notes* 19 months :D -
#Ghidra 12.1 is out, changes:
https://github.com/NationalSecurityAgency/ghidra/blob/Ghidra_12.1_build/Ghidra/Configurations/Public_Release/src/global/docs/ChangeHistory.md
My first contribution (#6827) landed after *checks notes* 19 months :D -
Ghidra-SNES project by JoshLeaves: #Ghidra extension for #SNES #reverseengineering #romhacking (first public release, feedback welcome!) #retrodev #emudev #retrogaming #assembler
Ghidra-SNES: A Ghidra extensio... -
Ghidra-SNES project by JoshLeaves: #Ghidra extension for #SNES #reverseengineering #romhacking (first public release, feedback welcome!) #retrodev #emudev #retrogaming #assembler
Ghidra-SNES: A Ghidra extensio... -
Hey, this is a real joy to use. Thanks @clearbluejar !
I mean, not to complain _too_ loudly on Ghidra's UI but ... prompting really is a better UX here.
-
Hey, this is a real joy to use. Thanks @clearbluejar !
I mean, not to complain _too_ loudly on Ghidra's UI but ... prompting really is a better UX here.
-
[RSS] libghidra - SDK for automating Ghidra from Python, Rust, and C++
https://github.com/0xeb/libghidra
#Ghidra -
[RSS] libghidra - SDK for automating Ghidra from Python, Rust, and C++
https://github.com/0xeb/libghidra
#Ghidra -
My work's been done with #Ghidra, and I've written custom #Python tools to do it. Including a custom exporter for an annotated HTML disassembly (https://chipx86.com/faxanadu/), #Mesen labels files, and source code that can be compiled with the ca65 compiler.
I've open sourced all that today:
-
My work's been done with #Ghidra, and I've written custom #Python tools to do it. Including a custom exporter for an annotated HTML disassembly (https://chipx86.com/faxanadu/), #Mesen labels files, and source code that can be compiled with the ca65 compiler.
I've open sourced all that today:
-
Реверс — это сканворд. Как я впервые нормально понял Ghidra
Привет, Хабр. У меня бывают неожиданные заказы, из неожиданных сфер на фрилансе. Недавно писал про то как прилетел большой проект по классификатору фоток. А теперь пришел запрос на реверс! Не могу вдаваться в подробности проекта - много конфиденциального - но я расскажу про конкретный разбор одного .dll файла. Открыл Ghidra, кликнул на функцию, включил декомпилятор - и передо мной встала стена. Не метафорическая стена. Прям реально стена! И вот пока я эту функцию ковырял, переименовывал переменные, ходил по ссылкам, открывал соседние функции, смотрел строки, в какой-то момент меня щёлкнуло. Это же сканворд.
https://habr.com/ru/articles/1029296/
#reverse_engineering #ghidra #реверсинжиниринг #binary_analysis #dll #decompilation #xrefs #static_analysis #reverse #binary_parsing
-
Related lazyweb question: is there a way to ask #ghidra to turn the 6502 add and add carry instructions into 16-bit math in the decompilation window? It does it sometimes with pointers, but not with shorts.
-
Related lazyweb question: is there a way to ask #ghidra to turn the 6502 add and add carry instructions into 16-bit math in the decompilation window? It does it sometimes with pointers, but not with shorts.
-
#Ghidra processor description module for NEC/Renesas v810 and v830 families #retrodev #virtualboy #PCFX #reverseengineering
NEC V810 and V830 (V800 family... -
#Ghidra processor description module for NEC/Renesas v810 and v830 families #retrodev #virtualboy #PCFX #reverseengineering
NEC V810 and V830 (V800 family... -
Threat hunting and malware analysis live! Let's find these naughty malware authors!
#VTuber #Malware #ReverseEngineering #ThreatHunting #URLScan #Ghidra
-
Threat hunting and malware analysis live! Let's find these naughty malware authors!
#VTuber #Malware #ReverseEngineering #ThreatHunting #URLScan #Ghidra
-
Well, some success. I think I figured out some kind of address for these types:
#ghidra #reverseengineering #win16 -
Well, some success. I think I figured out some kind of address for these types:
#ghidra #reverseengineering #win16 -
Back to my antics.. I think I seem to have figured out the RTTI stuff somewhat thanks to this resource:
http://hwreblog.com/projects/ghidra.html -
Back to my antics.. I think I seem to have figured out the RTTI stuff somewhat thanks to this resource:
http://hwreblog.com/projects/ghidra.html -
bitbyteshark aus dem @chaospott hatte neulich ein Problem mit einem #Firmware-Upgrade.
Mit #Ghidra ließ es sich schließlich lösen. 🐲
https://chaospott.de/2026/04/15/firmware-updater-fix.html
Viel Spaß beim Lesen des Writeups! 🥳
-
Thanks to
@jasminecarter.bsky.social
my cumulative complexity calculator for #Ghidra now has a cute logo:
https://github.com/v-p-b/rabbithole -
New projects added for the hackathon of next week such as misp-ghidra and also bsimvis
https://github.com/MISP/BSimVis
BSimVis is a tool to upload large quantities of decompiled binaries from Ghidra to a redis/kvrocks server for analyzing similarity, clustering and diffing functions based on Ghidra BSIM feature vectors. Binary analysis is done using Ghidra's decompiler thanks to Pyghidra scripting.
If you want to join us next week in Luxembourg at hackathon.lu -> join us at https://hackathon.lu/
#hackathon #luxembourg #opensource #cybersecurity #reversing #ghidra #bsim #cti #threatintel
