[HN Gopher] Ghidra 9.2 ___________________________________________________________________ Ghidra 9.2 Author : KindOne Score : 44 points Date : 2020-11-13 19:43 UTC (3 hours ago) (HTM) web link (ghidra-sre.org) (TXT) w3m dump (ghidra-sre.org) | AsyncAwait wrote: | So are we not concerned this is coming from the NSA anymore? | Genuinely asking, as imo they wouldn't try to sneak something in | the very first time it was released, all eyes were on them, but | now? | saagarjha wrote: | Generally, no. Consider that the people who use this tool are | probably the best to find malicious things in it. | unnouinceput wrote: | Open source, so no, we're not. | gautamcgoel wrote: | This is named after the three-headed dragon from the Godzilla | cinematic universe, right? | rockdiesel wrote: | I don't think it is. | | King Ghidorah is the 3 headed monster from the Godzilla | universe. | monkpit wrote: | Certainly seems like it is... | saagarjha wrote: | Anyone know if there's a changelog available anywhere? | dx87 wrote: | For anyone looking to learn Ghidra and finding it a little | overwhelming, a Ghidra book was recently released. I'm finding it | very helpful so far. | | https://nostarch.com/GhidraBook | huntsman wrote: | I'd also highly recommend the training course slides that are | included in the Ghidra distribution. The "Advanced" course | especially covers some cool tricks and ways Ghidra is different | from IDA/Binary Ninja. | 0xquad wrote: | Is there a database of already analyzed objects? For example, can | I search on the sha256sum of my IoT device's firmware and see if | someone else has done the heavy lifting? | mettamage wrote: | Currently, I don't get Ghidra that much. But I appreciate the | decompiler. While it isn't perfect, it reverses simple functions | to C like pseudo-code a lot faster than I can (not that I'm fast | at that anyway). Combining it with the free version of IDA (the | disassembler, not the decompiler of IDA) has helped me a lot with | hackthebox.eu challenges :) | jcranmer wrote: | I've never tried IDA Pro's decompiler, but my most recent | experience with the Ghidra decompiler had me going back to my | tried-and-true hand decompilation steps. (Admittedly, the | function in question had a switch statement that had sparse and | dense cases (with holes in the dense block!), which is | definitely going to do a decent job of confusing native | decompilers). | mettamage wrote: | Oh dear, yea no switch statement when I needed to use it. A | lot of byte/bit flipping. | KindOne wrote: | Previous discussion when it was announced back in 2019, with 400+ | comments: | | https://news.ycombinator.com/item?id=19315273 | zelly wrote: | Still waiting for a built-in debugger like IDA has | 29athrowaway wrote: | Not built in, but useful: | | - edb | | - x64dbg ___________________________________________________________________ (page generated 2020-11-13 23:00 UTC)