3 ms·
> your favorite reverse engineering suite, like Ghidra I'm thrilled at the adoption Ghidra has gotten, and glad the NSA used my tax dollars to contribute somet
by mdaniel 5y ago
> your favorite reverse engineering suite, like Ghidra
I'm thrilled at the adoption Ghidra has gotten, and glad the NSA used my tax dollars to contribute something useful to the world
I also loved the trick of using objcopy to turn the bytes into an ELF; that's just damn crafty
- webgoat 5y agoPretty sure they could have used the "set image base" option under the memory map view to accomplish the same thing, but it's still a cool workaround nonetheless.
- Ristovski 5y agoYou're right! However, I don't remember the exact issue, but Ghidra behaves differently when loading a raw binary vs when you load an ELF file. Perhaps it was something with the analyzers, I can't recall (there are ELF-specific ones for example).