NSA’s Reverse Engineering Tool Released
The National Security Agency (NSA) has released the source code of its software reverse engineering tool, GHIDRA, on GitHub.
GHIDRA is NSA’s classified, Java-based reverse engineering framework, which the agency uses to disassemble binaries of software to understand its functionality. It’s a critical tool to reverse engineer malicious software such as malware. GHIDRA also features a GUI and can run on Linux, macOS, and Windows.
“With this release, developers will be able to collaborate by creating patches, and extending the tool to fit their cybersecurity needs,” said the blog post.
According to NSA, the source code repository includes instructions to build on all supported platforms. GHIDRA source code includes a suite of software analysis tools. Some of its core capabilities include disassembly, assembly, decompilation, graphing, and scripting. It supports a wide variety of processor instruction sets and executable formats and can be run in both user-interactive and automated modes.
Security analysts can use the source code to develop their own GHIDRA plug-in components and/or scripts using the exposed APIs.
The source code is available for download at ghidra-sre.org along with the 9.0.2 patch.
Related content
-
Analysis tour with Binary Ninja
Binary analysis is an advanced technique used to work through cyberattacks and malware infestations and is also known as reverse engineering. We show you how to statically analyze binary programs with Binary Ninja, an interactive binary analysis platform. -
The Cuckoo sandboxing malware analysis tool
The open source Cuckoo Sandbox malware analysis system investigates malicious software. - XP Apocalypse
-
Improved defense through pen testing
Discover indicators of compromise with open source pen testing tools. -
ASP.NET web development framework
ASP.NET Core enables the development and operation of dynamic web applications.
Subscribe to our ADMIN Newsletters
Subscribe to our Linux Newsletters
Find Linux and Open Source Jobs
Most Popular
Support Our Work
ADMIN content is made possible with support from readers like you. Please consider contributing when you've found an article to be beneficial.
