The Ghidra Book The Definitive Guide 1st edition by Chris Eagle, Kara Nance 9781718501034 171850103X

The Ghidra Book The Definitive Guide 1st edition by Chris Eagle, Kara Nance – Ebook PDF Instant Download/Delivery. 9781718501034, 171850103X
Full download The Ghidra Book The Definitive Guide 1st edition  after payment

Product details:

ISBN 10: 171850103X
ISBN 13: 9781718501034
Author: Chris Eagle; Kara Nance

A guide to using the Ghidra software reverse engineering tool suite. The result of more than a decade of research and development within the NSA, the Ghidra platform was developed to address some of the agency’s most challenging reverse-engineering problems. With the open-source release of this formerly restricted tool suite, one of the world’s most capable disassemblers and intuitive decompilers is now in the hands of cybersecurity defenders everywhere — and The Ghidra Book is the one and only guide you need to master it. In addition to discussing RE techniques useful in analyzing software and malware of all kinds, the book thoroughly introduces Ghidra’s components, features, and unique capacity for group collaboration. You’ll learn how to: Navigate a disassembly Use Ghidra’s built-in decompiler to expedite analysis Analyze obfuscated binaries Extend Ghidra to recognize new data types Build new Ghidra analyzers and loaders Add support for new processors and instruction sets Script Ghidra tasks to automate workflows Set up and use a collaborative reverse engineering environment Designed for beginner and advanced users alike, The Ghidra Book will effectively prepare you to meet the needs and challenges of RE, so you can analyze files like a pro.

The Ghidra Book The Definitive Guide 1st Table of contents:

PART I: INTRODUCTION
1. Introduction to Disassembly

• Disassembly Theory
• The What of Disassembly
• The Why of Disassembly
• The How of Disassembly
• Summary

2. Reversing and Disassembly Tools

• Classification Tools
• Summary Tools
• Deep Inspection Tools
• Summary

3. Meet Ghidra

• Ghidra Licenses
• Ghidra Versions
• Ghidra Support Resources
• Downloading Ghidra
• Installing Ghidra
• Summary

PART II: BASIC GHIDRA USAGE
4. Getting Started with Ghidra

• Launching Ghidra
• Creating a New Project
• Analyzing Files with Ghidra
• Desktop Behavior During Initial Analysis
• Ghidra Desktop Tips and Tricks
• Summary

5. Ghidra Data Displays

• CodeBrowser
• CodeBrowser Windows
• Other Ghidra Windows
• Summary

6. Making Sense of a Ghidra Disassembly

• Disassembly Navigation
• Stack Frames
• Ghidra Stack Views
• Searching
• Summary

7. Disassembly Manipulation

• Manipulating Names and Labels
• Comments
• Basic Code Transformations
• Basic Data Transformations
• Summary

8. Data Types and Data Structures

• Making Sense of Data
• Recognizing Data Structure Use
• Creating Structures with Ghidra
• C++ Reversing Primer
• Summary

9. Cross-References

• Referencing Basics
• Reference Management Windows
• Summary

10. Graphs

• Basic Blocks
• Function Graphs
• Function Call Graphs
• Trees
• Summary

PART III: MAKING GHIDRA WORK FOR YOU
11. Collaborative SRE

• Teamwork
• Ghidra Server Setup
• Shared Projects
• Project Window Menus
• Project Repository
• Summary

12. Customizing Ghidra

• CodeBrowser
• Ghidra Project Window
• Tools
• Workspaces
• Summary

13. Extending Ghidra’s Worldview

• Importing Files
• Analyzers
• Word Models
• Data Types
• Function IDs
• Function ID Plugin
• Summary

14. Basic Ghidra Scripting

• Script Manager
• Script Development
• Introduction to the Ghidra API
• Ghidra Scripting Examples
• Summary

15. Eclipse and GhidraDev

• Eclipse
• GhidraDev Menu
• Example: Ghidra Analyzer Module Project
• Summary

16. Ghidra in Headless Mode

• Getting Started
• Writing Scripts
• Summary

PART IV: A DEEPER DIVE
17. Ghidra Loaders

• Unknown File Analysis
• Manually Loading a Windows PE File
• Example 1: SimpleShellcode Loader Module
• Example 2: Simple Shellcode Source Loader
• Example 3: Simple ELF Shellcode Loader
• Summary

18. Ghidra Processors

• Understanding Ghidra Processor Modules
• Modifying a Ghidra Processor Module
• Summary

19. The Ghidra Decompiler

• Decompiler Analysis
• The Decompiler Window
• Summary

20. Compiler Variations

• High-Level Constructs
• Compiler Build Options
• Compiler-Specific C++ Implementation
• Locating the main Function
• Summary

PART V: REAL-WORLD APPLICATIONS
21. Obfuscated Code Analysis

• Anti–Reverse Engineering
• Static Deobfuscation of Binaries Using Ghidra
• Summary

22. Patching Binaries

• Planning Your Patch
• Finding Things to Change
• Applying Your Patch
• Exporting Files
• Example: Patching a Binary
• Summary

23. Binary Differencing and Version Tracking

• Binary Differencing
• Comparing Functions
• Version Tracking
• Summary

Ghidra for IDA Users

• The Basics
• Scripting
• Summary

People also search for The Ghidra Book The Definitive Guide 1st :

the ghidra book pdf
    
the ghidra book pdf github
    
the ghidra book the definitive guide free pdf
    
the ghidra book