Ghidra Book

Chris Eagle has been reverse engineering software for 40 years. He is the author of The IDA Pro Book (No Starch Press) and is a highly sought-after provider of reverse engineering training. He has published numerous reverse engineering tools and given numerous talks at conferences such as Blackhat, Defcon, and Shmoocon.Dr. Kara Nance is a private security consultant. She has been a professor of computer science for many years. She has served on the Honeynet Project Board of Directors and has given numerous talks at conferences around the world. She enjoys building Ghidra extensions and regularly provides Ghidra training

"The Ghidra Book provides a thorough introduction for new users, using clear examples with plenty of background information . . . a valuable addition to the skill set of a malware analyst." —Max Kersten"The book takes you from the beginning of your Ghidra journey to the end. From an introduction to disassembly and working with the basics of Ghidra to scripting in Ghidra to extend its capabilities, this book covers it all. . . . a perfect 5/5 for me."—Tyler Reguly, Tripwire Book Club "I would highly recommend this book. Rather than simply being a Ghidra user guide, the authors did an exceptional job of laying out many of the fundamental concepts involved in software reverse engineering."—Craig Young, Principal Security Researcher, Tripwire "I enjoyed The Ghidra Book, and it was a good starting point for me in entering the world of reverse engineering and the many different tools that are accessible due to being open-sourced. I encourage anyone that has an interest in reverse engineering or who just wants to investigate cool open-sourced tools to give The Ghidra Book a read."—Matthew Jerzewski, Security Researcher, Tripwire

• Chapter 1: Introduction to DisassemblyChapter 2: Reversing and Disassembly ToolsChapter 3: Ghidra BackgroundChapter 4: Getting Started with GhidraChapter 5: CodeBrowser and Display WindowsChapter 6: Disassembly NavigationChapter 7: Disassembly ManipulationChapter 8: Data Types and Data StructuresChapter 9: Cross-ReferencesChapter 10: GraphsChapter 11: Collaborative SRE with GhidraChapter 12: Customizing GhidraChapter 13: Extending Ghidra SignaturesChapter 14: Basic Ghidra ScriptingChapter 15: Advanced Ghidra ScriptingChapter 16: Using Ghidra in Headless ModeChapter 17:  Unrecognized Binary FilesChapter 18: ProcessorsChapter 19: Compiler VariationsChapter 20: Obfuscated Code AnalysisChapter 21: Patching BinariesChapter 22: Vulnerability AnalysisChapter 23: Binar Differencing and Version TrackingAppendix A: Ghidra for IDA UsersAppendix B: C to assembly correspondence