Chapter 2
- Ghidra scripts are useful because they can be used to automatize reverse engineering tasks.
Some tasks that you can automatize using Ghidra scripts are the following:
- Searching for strings and code patterns
- Automatically deobfuscating code
- Adding useful comments to enrich the dissasembly
- Scripts are organized by category, as shown on the left-hand side of the following screenshot:
When clicking on the checklist icon located in the upper-right margin, as shown in the preceding screenshot taken from the Script Manager window, the paths of script directories will be shown:
But the organization of the scripts in the Script Manager is taken from the
@category
field located in the header of the script code, as shown in the following listing://TODO write a description for this script //@author //@category Strings //@keybinding //@menupath //@toolbar
Notice that the previous script header is a Python header, but an analogous header is used...