Sign In Start Free Trial
Account

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Ghidra Software Reverse-Engineering for Beginners
  • Table Of Contents Toc
Ghidra Software Reverse-Engineering for Beginners

Ghidra Software Reverse-Engineering for Beginners - Second Edition

By : David Álvarez Pérez, Ravikant Tiwari
3 (2)
close
close
Ghidra Software Reverse-Engineering for Beginners

Ghidra Software Reverse-Engineering for Beginners

3 (2)
By: David Álvarez Pérez, Ravikant Tiwari

Overview of this book

Written by David Álvarez Pérez, a senior malware analyst at Gen Digital Inc., and Ravikant Tiwari, a senior security researcher at Microsoft, with expertise in malware and threat detection, this book is a complete guide to using Ghidra for examining malware, making patches, and customizing its features for your cybersecurity needs. This updated edition walks you through implementing Ghidra’s capabilities and automating reverse-engineering tasks with its plugins. You’ll learn how to set up an environment for practical malware analysis, use Ghidra in headless mode, and leverage Ghidra scripting to automate vulnerability detection in executable binaries. Advanced topics such as creating Ghidra plugins, adding new binary formats, analyzing processor modules, and contributing to the Ghidra project are thoroughly covered too. This edition also simplifies complex concepts such as remote and kernel debugging and binary diffing, and their practical uses, especially in malware analysis. From unpacking malware to analyzing modern ransomware, you’ll acquire the skills necessary for handling real-world cybersecurity challenges. By the end of this Ghidra book, you’ll be adept at avoiding potential vulnerabilities in code, extending Ghidra for advanced reverse-engineering, and applying your skills to strengthen your cybersecurity strategies.
Table of Contents (27 chapters)
close
close
Lock Free Chapter
1
Part 1: Introduction to Ghidra
6
Part 2: Reverse-Engineering
10
Part 3: Binary Analysis
14
Part 4: Extending Ghidra for Advanced Reverse-Engineering
20
Part 5: Debugging and Applied Malware Analysis

Remote debugging

In this section, we will learn how to debug an application remotely. Earlier, I provided some example scenarios in which remote debugging might be helpful. From those scenarios, let’s pick debugging Linux executables using remote debugging. To do this, we need to have a virtual machine that’s running any Linux distribution. The first thing to do is compile simple_encode.c on Linux using gcc to produce a Linux executable (ELF) file. On a Linux machine, simply run the following command to build the simple_encoder executable:

gcc simple_encoder.c -O0 -o simple_encoder

The following figure shows the build and output of executing the simple_encoder executable on Linux, which is exactly the same as on Windows:

Figure 16.36 – Compiling and executing simple_encoder on the Linux box

Figure 16.36 – Compiling and executing simple_encoder on the Linux box

If you don’t have gdbserver installed on your Linux machine, install it using the following command:

sudo apt-get install gdbserver...
CONTINUE READING
83
Tech Concepts
36
Programming languages
73
Tech Tools
Icon Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.
Icon Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.
Icon 50+ new titles added per month and exclusive early access to books as they are being written.
Ghidra Software Reverse-Engineering for Beginners
notes
bookmark Notes and Bookmarks search Search in title playlist Add to playlist download Download options font-size Font size

Change the font size

margin-width Margin width

Change margin width

day-mode Day/Sepia/Night Modes

Change background colour

Close icon Search
Country selected

Close icon Your notes and bookmarks

Confirmation

Modal Close icon
claim successful

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY

Submit Your Feedback

Modal Close icon
Modal Close icon
Modal Close icon