Ghidra Software Reverse-Engineering for Beginners. Master the art of debugging, from understanding code to mitigating threats

Ghidra Software Reverse-Engineering for Beginners. Master the art of debugging, from understanding code to mitigating threats - Opis

Written by David Álvarez Pérez, a senior malware analyst at Gen Digital Inc., and Ravikant Tiwari, a senior security researcher at Microsoft, with expertise in malware and threat detection, this book is a complete guide to using Ghidra for examining malware, making patches, and customizing its features for your cybersecurity needs.This updated edition walks you through implementing Ghidra’s capabilities and automating reverse-engineering tasks with its plugins. You’ll learn how to set up an environment for practical malware analysis, use Ghidra in headless mode, and leverage Ghidra scripting to automate vulnerability detection in executable binaries. Advanced topics such as creating Ghidra plugins, adding new binary formats, analyzing processor modules, and contributing to the Ghidra project are thoroughly covered too.This edition also simplifies complex concepts such as remote and kernel debugging and binary diffing, and their practical uses, especially in malware analysis. From unpacking malware to analyzing modern ransomware, you’ll acquire the skills necessary for handling real-world cybersecurity challenges.By the end of this Ghidra book, you’ll be adept at avoiding potential vulnerabilities in code, extending Ghidra for advanced reverse-engineering, and applying your skills to strengthen your cybersecurity strategies. Spis treści: 1. Getting Started with Ghidra2. Automating RE Tasks with Ghidra Scripts3. Ghidra Debug Mode4. Using Ghidra Extensions5. Reversing Malware Using Ghidra6. Scripting Malware Analysis7. Using Ghidra's Headless Analyzer8. Binary Diffing9. (...) więcej Auditing Program Binaries10. Scripting Binary Audits11. Developing Ghidra Plugins12. Incorporating New Binary Formats13. Analyzing Processor Modules14. Contributing to the Ghidra Community15. Extending Ghidra for Advanced Reverse-Engineering16. Debugging17. Unpacking in-the-Wild Malware18. Reverse-Engineering Ransomware mniej