Ghidra, software reverse engineering framework.

[djrm]

Ghidra, software reverse engineering framework.

Ive known a bit about Ghirdra for some time but never needed to install it and didnt quite know what it could do but after getting frustrated with the disassembler ive been using I watched a couple of videos aabout it and decided to give it a trial. It doesnt quite justwork strait out of the boxbut with a little input it soon gets away and starts making really useful output with nicely formatted disasembly listings.

Ghirdra is a cross platform tool written in Java, it depends on having JRE installed. The actual program and installation instructions are available on Github here: https://github.com/NationalSecurityAgency/ghidra I had no difficulty instaling it on my M4 Mac by following the simple instructions.

The configuration process is allfully interactive so you can see changes you make in realtime, i.e.chnging a labelname immediateleychanges the whole listing wherever it is used. Another useful feature is the ability to define data structures of complex types including arrays of structures. Program flow is highlited with little lines joining branch source and destinations.

Ive ben using Ghirdra to reverse engineer the MACH-9 AIM-65 6809 CPU replacement software, its getting easier now some of the key functions are known about but still a way to go. Ghirdra can process binary files written for most common processors including 8086, Z80, 6502, and 6809 etc.I'm still at the beginner stage but its proving to be quite a bit of fun seeing the generated soure code taking shape.

The generated source looks like it should compile ok.
There is a feature to run the generated code within the application itself, but I havnt tried this yet...
When I'm back at my dest I'll add a few screenshots of the output etc.
Best rgards, David.

[Editor]

Ghidra, software reverse engineering framework.

Thanks for posting this. I hadn't actually heard of Ghidra before, and it looks very interesting.

[djrm]

Here is a small sample of the Mach9 disassembly I'm working on with Ghirdra:
Much of the program is a translation of the 6502 AIM-65 with similar functions and data locations which is helping a lot.
Other areas are still a mystery to me but I keep picking away at it.
It would be nice if one day it could eventually be in a form to rebuild with my own extensions.

and another:

[Vincent]

Hi !
Just a quick bookmark post, about a nice and useful video introduction to Ghidra :
Reverse engineer 8-bit games with this free tool | Ghidra intro
Coco Town YT channel
~17 minutes

[djrm]

Hi Vincent, that's the tutorial I used myself to get started. Btw the MACH9 project runs now on my 6809 MECB and I've started making a command list document for it.

https://github.com/DavidJRichards/Angel ... /Mach-9.md

David.