The ability to analyze software with a disassembler is a crucial reverse engineering skill and one of the core competencies expected of malware analysts and software security researchers. Ghidra is one of the world's most capable disassemblers, and it's the only one that includes an environment for collaborative reverse engineering. Ghidra is also a comprehensive open source tool suite and a powerful alternative to the commercial competitors that come with a hefty price tag and steep learning curve.
The Ghidra Book is a practical, thorough introduction to Ghidra. It includes instructions on how to use and modify Ghidra to make it meet your needs or those of your organization. The book begins with background on the reverse engineering process. You'll then be introduced to important Ghidra features, together with examples showing how to customize the suite. You'll learn how to:
Navigate a disassembly
Use Ghidra's built-in decompiler to expedite analysis
Analyze obfuscated binaries
Extend Ghidra to recognize new data types
Build new Ghidra analyzers
Build new Ghidra loaders
Add support for new processors and instruction sets
Script Ghidra tasks to automate workflows
Set up and use a collaborative reverse engineering environment
