Textbook in PDF format The result of more than a decade of research and development within the NSA, the Ghidra platform was developed to address some of the agency’s most challenging reverse-engineering problems. With the open-source release of this formerly restricted tool suite, one of the world’s most capable disassemblers and intuitive decompilers is now in the hands of cybersecurity defenders everywhere—and The Ghidra Book, 2nd edition, is the one and only guide you need to master it. In addition to discussing RE techniques useful in analyzing software and malware of all kinds, the book thoroughly introduces Ghidra’s components, features, and unique capacity for group collaboration. You’ll learn how to: Navigate a disassembly Use Ghidra’s built-in decompiler to expedite analysis Analyze obfuscated binaries Extend Ghidra to recognize new data types Build new Ghidra analyzers and loaders Add support for new processors and instruction sets Script Ghidra tasks to automate workflows Set up and use a collaborative reverse engineering environment Designed for beginner and advanced users alike, The Ghidra Book, 2nd edition, will effectively prepare you to meet the needs and challenges of RE, so you can analyze files like a pro. New to this edition: This updated edition reflects the continued evolution of the open source project and brings readers up to speed with expanded real-world examples, new tools like PyGhidra and BSim, enhanced debugger capabilities, and seamless IDE integration. Clear, practical examples are woven into every chapter, helping you leverage Ghidra’s growing ecosystem and modern development environments to their fullest potential. Who Should Read This Book? This book is intended for aspiring and experienced software reverse engineers. If you don’t already have reverse engineering experience, that’s okay, as the early chapters provide the background material necessary to introduce you to reverse engineering and enable you to explore and analyze binaries with Ghidra. We assume a basic understanding of programming because you will need to be familiar with concepts such as functions, variables, loops, and data structures to understand what you see when analyzing binaries. You do not need to be an expert programmer, but you should be comfortable reading code snippets and reasoning through program logic. Experienced reverse engineers who want to add Ghidra to their tool-kits might choose to move quickly through the first two parts to gain a basic understanding of Ghidra and then jump to specific chapters of interest. Advanced Ghidra users and developers may choose to focus on the later chapters, where they will learn how to create new Ghidra extensions and apply their experience to contribute new content to the Ghidra project