4 ms·

As much as I enjoy using radare2, I can't help but feel that the release of GHIDRA has made it somewhat obsolete. Perhaps some components of it can be used in r

by ATsch 8y ago

As much as I enjoy using radare2, I can't help but feel that the release of GHIDRA has made it somewhat obsolete. Perhaps some components of it can be used in r2 in the future though.

snvzz 8y ago
Does GHIDRA actually do something that radare2 doesn't? I'm asking seriously. To me, it seems like it deals with a subset of radare2 features only, and is slow + uses a shitload of ram, when it doesn't outright crash/100%cpu on a problem binary. As for reusing code as r2 plugins components, I've heard about some efforts around r2's irc channel.
- _underfl0w_ 8y ago
  It's funny that you say that - I had the exact opposite experience. I've run several binaries through Ghidra that Cutter locks up with. In fact, that's what made me look into Ghidra at all after having found Cutter a few months ago. Just my anecdotal experience obviously. What are specific Cutter features that Ghidra lacks?
  - snvzz 8y ago
    >I've run several binaries through Ghidra that Cutter locks up with. That's interesting. Please drop by the irc channel to report! I do suspect it's cutter-specific, and radare cli would work fine. Pancake keeps a collection of past problematic binaries which are used for automatic regression testing. If my suspicion is right, it'd be worth auto-testing cutter too.
StavrosK 8y ago
This is probably me being paranoid, but do we actually trust Ghidra to not contain any backdoors?
- _underfl0w_ 8y ago
  I'm torn here. I feel like that would be incredibility audacious given the intended user base, but they've done worse. I've used it in a VM with no outbound networking capabilities and on a Kali install after physically disconnecting it from the network. Wouldn't help against persistent threats, though. Personally, downloading a .zip file directly from a .gov website left me with a weird feeling. I would trust it more if they actually used the github repo for it. Let's just hope my HDD firmware is still intact...
  - StavrosK 8y ago
    Yeah, I feel the same. I downloaded and unzipped it, but was never brave enough to actually run it.
ph0rkyas 8y ago
..but Ghidra, as Cutter can't debug... (that's why I'll have to learn radare2 still, when staying with the free beer thing..)

by ATsch 8y ago

As much as I enjoy using radare2, I can't help but feel that the release of GHIDRA has made it somewhat obsolete. Perhaps some components of it can be used in r2 in the future though.

snvzz 8y ago

Does GHIDRA actually do something that radare2 doesn't? I'm asking seriously. To me, it seems like it deals with a subset of radare2 features only, and is slow + uses a shitload of ram, when it doesn't outright crash/100%cpu on a problem binary. As for reusing code as r2 plugins components, I've heard about some efforts around r2's irc channel.

_underfl0w_ 8y ago
It's funny that you say that - I had the exact opposite experience. I've run several binaries through Ghidra that Cutter locks up with. In fact, that's what made me look into Ghidra at all after having found Cutter a few months ago. Just my anecdotal experience obviously. What are specific Cutter features that Ghidra lacks?
- snvzz 8y ago
  >I've run several binaries through Ghidra that Cutter locks up with. That's interesting. Please drop by the irc channel to report! I do suspect it's cutter-specific, and radare cli would work fine. Pancake keeps a collection of past problematic binaries which are used for automatic regression testing. If my suspicion is right, it'd be worth auto-testing cutter too.

StavrosK 8y ago

This is probably me being paranoid, but do we actually trust Ghidra to not contain any backdoors?

_underfl0w_ 8y ago
I'm torn here. I feel like that would be incredibility audacious given the intended user base, but they've done worse. I've used it in a VM with no outbound networking capabilities and on a Kali install after physically disconnecting it from the network. Wouldn't help against persistent threats, though. Personally, downloading a .zip file directly from a .gov website left me with a weird feeling. I would trust it more if they actually used the github repo for it. Let's just hope my HDD firmware is still intact...
- StavrosK 8y ago
  Yeah, I feel the same. I downloaded and unzipped it, but was never brave enough to actually run it.

ph0rkyas 8y ago

..but Ghidra, as Cutter can't debug... (that's why I'll have to learn radare2 still, when staying with the free beer thing..)