3 ms·

Reviews of it seem alright. Still have yet to see the source code added to the repo :)

by julianh95 8y ago

tptacek 8y ago
Isn't the source code zipped up alongside the binaries?
- mcpherrinm 8y ago
  For Java, not for native code. Fortunately we have Ghidra to look at itself?
  - beefhash 8y ago
    > Fortunately we have Ghidra to look at itself? The all-time classic “Reflections on Trusting Trust”[1] seems relevant again here. [1] https://www.archive.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf https://www.archive.ece.cmu.edu/~ganger/712.fall02/papers/p7...
    - saagarjha 8y ago
      You're welcome to use Hopper/IDA Pro/Radare/Binary Ninja…
    - gpm 8y ago
      That's the joke
Dumbdo 8y ago
For anyone else curious: https://github.com/NationalSecurityAgency/ghidra/wiki/Frequently-asked-questions#where-is-the-complete-ghidra-source-code https://github.com/NationalSecurityAgency/ghidra/wiki/Freque... > This repository is a placeholder for the full open source release. Be assured efforts are under way to make the software available here. In the meantime, enjoy using Ghidra on your SRE efforts, developing your own scripts and plugins, and perusing the over a million lines of Java and Sleigh code released within the initial public release. The release can be downloaded from our project homepage at www.ghidra-sre.org. Please consider taking a look at our contributor guide to see how you can participate in this open source project when it becomes available.
nneonneo 8y ago
There's enough source code provided that I was able to patch the Java code to fix a bug: https://github.com/NationalSecurityAgency/ghidra/issues/2#issuecomment-469999523 https://github.com/NationalSecurityAgency/ghidra/issues/2#is... While there's no source for the decompiler, the decompiler binaries themselves are unstripped and C++, meaning they're actually fairly straightforward to reverse. Plus, you get all the Java code that drives the decompiler binaries.

Reviews of it seem alright. Still have yet to see the source code added to the repo :)

tptacek 8y ago

Isn't the source code zipped up alongside the binaries?

mcpherrinm 8y ago
For Java, not for native code. Fortunately we have Ghidra to look at itself?
- beefhash 8y ago
  > Fortunately we have Ghidra to look at itself? The all-time classic “Reflections on Trusting Trust”[1] seems relevant again here. [1] https://www.archive.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf https://www.archive.ece.cmu.edu/~ganger/712.fall02/papers/p7...
  - saagarjha 8y ago
    You're welcome to use Hopper/IDA Pro/Radare/Binary Ninja…
  - gpm 8y ago
    That's the joke

Dumbdo 8y ago

For anyone else curious: https://github.com/NationalSecurityAgency/ghidra/wiki/Frequently-asked-questions#where-is-the-complete-ghidra-source-code https://github.com/NationalSecurityAgency/ghidra/wiki/Freque... > This repository is a placeholder for the full open source release. Be assured efforts are under way to make the software available here. In the meantime, enjoy using Ghidra on your SRE efforts, developing your own scripts and plugins, and perusing the over a million lines of Java and Sleigh code released within the initial public release. The release can be downloaded from our project homepage at www.ghidra-sre.org. Please consider taking a look at our contributor guide to see how you can participate in this open source project when it becomes available.

nneonneo 8y ago

There's enough source code provided that I was able to patch the Java code to fix a bug: https://github.com/NationalSecurityAgency/ghidra/issues/2#issuecomment-469999523 https://github.com/NationalSecurityAgency/ghidra/issues/2#is... While there's no source for the decompiler, the decompiler binaries themselves are unstripped and C++, meaning they're actually fairly straightforward to reverse. Plus, you get all the Java code that drives the decompiler binaries.