Chapter 1
- No one reverse engineering framework is the ultimate. Each reverse engineering framework has its own strengths and weaknesses. We can mention some current Ghidra strengths when comparing Ghidra with most other reverse engineering frameworks:
- It is open source and free (including its decompiler).
- It supports a lot of architectures (it may be the framework you are using is not supported yet).
- It can load multiple binaries at the same time in a project. This feature allows you to easily apply operations over many related binaries (for example, an executable binary and its libraries).
- It allows collaborative reverse engineering by design.
- It supports big firmware images (1 GB +) without problems.
- It has awesome documentation, which includes examples and courses.
- It allows version tracking of binaries allowing the matching of functions and data and their markup between different versions of the binary.
But we can also mention an important weakness:
- Ghidra Python scripting...