Hacker News Reader

Comment by dx87 | Hacker News Reader

For anyone looking to learn Ghidra and finding it a little overwhelming, a Ghidra book was recently released. I'm finding it very helpful so far.

https://nostarch.com/GhidraBook

View on HN

Reprising a previous comment: this book is good, but fair warning that it's not, like, a fun read; it's like one of those books from the 1990s that explains every dialog box in Microsoft Word. It's an excellent reference, but if you're just getting started reversing, Eidad Eilam's _Reversing_ is still a good choice.

Part of the reason I keep saying this is, if you've done reversing work with IDA or Hopper, you can fumble your way to productivity with Ghidra without a book. So: if Ghidra is completely greek to you, start maybe with fundamentals.

I'd also highly recommend the training course slides that are included in the Ghidra distribution. The "Advanced" course especially covers some cool tricks and ways Ghidra is different from IDA/Binary Ninja.

I just started with https://hackaday.io/course/172292-introduction-to-reverse-en...

A review of the Ghidra book

https://maxkersten.nl/2020/09/13/a-review-of-the-ghidra-book...

SANS FOR610: Reverse Engineering Malware also has updated content to teach Ghidra.

Unless it changed since it incorporated Ghidra, SANS FOR610 has a very shallow look into actual static reversing of native code.

It's a good introduction but does not venture far.

Reply on news.ycombinator.com