|
Ghidra Ninja
@
ghidraninja
|
|
Ghidra reverse engineering stuff. Not affiliated with anyone: not an official Ghidra developer, not an official spokesperson, just a guy who likes reversing.
|
|
|
129
Tweetovi
|
16
Pratim
|
6.139
Osobe koje vas prate
|
| Tweetovi |
|
Ghidra Ninja
@ghidraninja
|
1 h |
|
Also happens to be a specialty of mine :) problem is finding an interesting firmware
|
||
|
|
||
|
Ghidra Ninja
@ghidraninja
|
2 h |
|
Would love to hear what you are the most interested in!
|
||
|
|
||
|
Ghidra Ninja
@ghidraninja
|
5 h |
|
I think one of the best ways is to start by understanding what kind of code a compiler generates, so basically write some simple code and then load it into Ghidra - see whether you can fully understand what you see in Ghidra etc.
|
||
|
|
||
| Ghidra Ninja proslijedio/la je tweet | ||
|
Gergely Revay
@geri_revay
|
4. velj |
|
Awesome #wannacry reversing tutorials from @ghidraninja
Part 1: youtube.com/watch?v=Sv8yu1…
Part 2: youtube.com/watch?v=Q90uZS…
#reverseengineering #malware #ghidra
|
||
|
|
||
|
Ghidra Ninja
@ghidraninja
|
3. velj |
|
Haven't seen it, but will take a look! Thanks! When I'm speaking at a conference I basically never see any talks - prep and afterwards relaxing from the stress leading up to it :)
|
||
|
|
||
|
Ghidra Ninja
@ghidraninja
|
3. velj |
|
The problem is that you really want an integrated debugger and do some live analysis for this - so hoping for the debugger release :)
|
||
|
|
||
|
Ghidra Ninja
@ghidraninja
|
2. velj |
|
Thanks! Glad you enjoyed it!
|
||
|
|
||
|
Ghidra Ninja
@ghidraninja
|
2. velj |
|
Thank you! Appreciate it!
|
||
|
|
||
|
Ghidra Ninja
@ghidraninja
|
2. velj |
|
Finally released part 2 of my »Reversing #WannaCry with #Ghidra« series!
In this video we reverse engineer some of the integrated decryption methods and see how we can easily analyze C++ code in Ghidra.
youtube.com/watch?v=Q90uZS…
|
||
|
|
||
|
Ghidra Ninja
@ghidraninja
|
1. velj |
|
There’s a telegram channel with a lot of people in it t.me/GhidraRE
|
||
|
|
||
|
Ghidra Ninja
@ghidraninja
|
1. velj |
|
You have to compile it using gradle and then load it into Ghidra (in the project Windows in the file menu there’s an item named “Load extension” or so)
|
||
|
|
||
|
Ghidra Ninja
@ghidraninja
|
29. sij |
|
If you are into C++ reverse engineering and never tried OOAnalyzer you are missing out big time! insights.sei.cmu.edu/sei_blog/2019/…
|
||
|
|
||
|
Ghidra Ninja
@ghidraninja
|
21. sij |
|
Thank you! :)
|
||
|
|
||
|
Ghidra Ninja
@ghidraninja
|
21. sij |
|
Interested in the details of CVE-2020-0601/Curveball? I released a video on Friday going into the technical details of the Microsoft CryptoAPI vulnerability! youtube.com/watch?v=8RI60a…
|
||
|
|
||
| Ghidra Ninja proslijedio/la je tweet | ||
|
Graham Bleaney
@GrahamBleaney
|
18. sij |
|
Great explanation of CVE-2020-0601 (aka Curveball aka Whose Curve is it Anyway aka the NSA Microsoft CryptoAPI Vulnerability). It's really accessible and accidentally made me understand ECC properly for the first time
youtube.com/watch?v=8RI60a… twitter.com/ghidraninja/st…
|
||
|
|
||
|
Ghidra Ninja
@ghidraninja
|
17. sij |
|
Thanks a lot! Haven’t tried yet to be honest, maybe I’ll give it a spin when I have some downtime!
|
||
|
|
||
|
Ghidra Ninja
@ghidraninja
|
17. sij |
|
Yea indeed, least egoistic person I know
|
||
|
|
||
|
Ghidra Ninja
@ghidraninja
|
17. sij |
|
I just published a video explaining the details of CVE-2020-0601 aka Curveball: The Microsoft CryptoAPI vulnerability that was reported by the NSA.
youtube.com/watch?v=8RI60a…
|
||
|
|
||
|
Ghidra Ninja
@ghidraninja
|
16. sij |
|
Yep, not affiliated with Ghidra at all
|
||
|
|
||
|
Ghidra Ninja
@ghidraninja
|
16. sij |
|
Glad you like it!
|
||
|
|
||