I wonder how Hex-Rays IDA sales are doing since Ghidra was released. Edit: If anyone can read French accounts: <a href="https://consult.cbso.nbb.be/consult-enterprise/0873473914" rel="nofollow">https://consult.cbso.nbb.be/consult-enterprise/0873473914</a>
I'm developing my own Ghidra extension that can export object files out of a program selection: <a href="https://github.com/boricj/ghidra-delinker-extension">https://github.com/boricj/ghidra-delinker-extension</a><p>Ghidra's data model, analyzers and UI gave me a framework that allowed me to experiment and focus on the specifics of delinking, which is the key to make this idea work. Without that, I would not have been able to pull it off and I would've given up on my decompilation project a long time ago, for lack of a means to divide and conquer it.
Joe Grand's latest video shows a clever usage of Ghidra to understand insecure password generator methods and recover lost BTC.
<a href="https://youtu.be/o5IySpAkThg?si=EGhF7Jf01G6nQPL9" rel="nofollow">https://youtu.be/o5IySpAkThg?si=EGhF7Jf01G6nQPL9</a>
Purely out of ignorance - what's the context here? I'm not in this space, but afaik Ghidra was released years ago so I'm guessing this post was triggered by a recent development, but it's not clear what that might be.
Ghidra is <i>powerful</i>. The only thing I miss is the ability to actually do versioned (=Git) collaboration, or at least to publish stuff to Github or whatever <i>without</i> needing to either host Ghidra Server myself or depend on someone else.
Ghidra is an amazing tool, and indeed the fact that the NSA contributed this to the public is amazing, but understandable if your goal is to enhance cyber-security: it is the perfect swiss knife to figure out if there's nasty things embedded in binary blobs.<p>The one thing I would love to see come to Ghidra is an ML powered assistant that adds two features:<p><pre><code> - AI-powered automated, semantically relevant, routine and variable naming
- AI-powered compiler recognition and improved recovery of loop structure
</code></pre>
Both things should be possible using LLMs and the fact that compilers can be used to generate an infinite size training set for almost free.
I just can't stand Ghidra's UI. Trying to get it to look nice, at least on Linux with HiDPI, is such a chore. These Eclipse-y GUIs have aged like milk
What's the history of the name?<p>Ghidra sounds Russian (Гидра) for Hydra.<p>Was it considered cool to use Russian words for hacker/spy things?
Just looking at what AI can do with a simple error message should tell you heaps and bounds how much help it could be in analysis for reverse engineering.