Chapter 3
- Yes. ZIP files containing the source code are attached to the same folder that the JAR file you want to debug exists in. To link the source code with the JAR file using the Eclipse IDE, right-click on the JAR file and then enter the ZIP file in the Workspace location field of the Java Source Attachment section as shown in the following screenshot:
After that, you will be able to expand the JAR file, showing included
*.class
files. - Yes, it is possible, as demonstrated in the following blog post:
https://reversing.technology/2019/11/18/ghidra-dev-pt1.html
But remember that the Eclipse IDE is the only one officially supported by Ghidra.
- Some vulnerabilities were found in Ghidra but those and any other ones are probably not NSA backdoors into the program. The NSA has its own zero-day exploits to hack computers and, for sure, doesn't need to introduce backdoors into its own programs to hack the computers of people...