INFILTRATE - Security Conference

Jeremy Blackthorne: Reverse-Engineering with Ghidra

This is a majority hands-on course on using Ghidra for reverse-engineering and vulnerability research. Exercises include Windows binaries, Linux binaries, and device firmware, and will be in a variety of architectures, including ARM, PowerPC, MIPS, x86, and x64. After completing this course, students will have the practical skills to use Ghidra in their day-to-day reversing tasks.

Course Information

Date: April 19th - April 22nd
Course Fee: $4,900
CPE Credits: 0

View the Conference Calendar

More Infiltrate Courses

If you are trying to determine which course is best suited for you, email us at infiltrate@immunityinc[dot]com and we will assist you.

See all the courses

Syllabus

Course Length: 4 Days

DAY 1 - Reversing Engineering with Ghidra

Ghidra overview
Project management
Code navigation, manipulation
Symbols, labels, bookmarks, searching
Disassembler-decompiler interaction
Patching

DAY 2 - Ghidra Expert Tools

Decompiler deep dive
Datatype management
Memory management
P-code
Program flow
Ghidra tools
Plugin groups

DAY 3 - Automation with Ghidra

Java/Jython refresher
The Ghidra FlatAPI
Development with Eclipse and the GhidraDev plugin
Analysis in Ghidra headless mode
Java-Jython interop

DAY 4 - Extending Ghidra with ExtensionPoint

Loader, Decryptor, FileSystem
BuiltInDataType, AbstractAnalyzer

View Detailed Syllabus

Courses