├── Chapter01 ├── hello_world.c └── hello_world.exe ├── Chapter02 ├── nop_script_java.java └── nop_script_python.py ├── Chapter03 ├── NopScript2.java └── NopScript2_execution.PNG ├── Chapter04 ├── Ghidra Extension Skeletons │ ├── SkeletonAnalyzer.java │ ├── SkeletonExporter.java │ ├── SkeletonFileSystem.java │ ├── SkeletonLoader.java │ └── SkeletonPlugin.java └── SampleTablePlugin │ └── ghidra │ ├── examples │ ├── BasicBlockCounterFunctionAlgorithm.java │ ├── FunctionAlgorithm.java │ ├── FunctionStatsRowObject.java │ ├── ReferenceFunctionAlgorithm.java │ ├── SampleTableModel.java │ ├── SampleTablePlugin.java │ ├── SampleTableProvider.java │ └── SizeFunctionAlgorithm.java │ └── examples2 │ ├── SampleSearchTableModel.java │ ├── SampleSearchTablePlugin.java │ ├── SampleSearchTableProvider.java │ ├── SampleSearcher.java │ └── SearchResults.java ├── Chapter05 ├── alina_ghidra_project │ └── alina_ghidra_project.zip └── alina_malware_sample │ ├── alina_malware_sample.zip │ └── alina_malware_sample_password.txt ├── Chapter06 ├── HashFixer.java ├── get_kernel32_exports.py └── hash_fixer.py ├── Chapter07 ├── HeadlessFindTextScript.java ├── HeadlessFindTextScript.properties ├── Hello_World │ └── hello_world.c ├── download_malware_samples.py └── requirements.txt ├── Chapter08 ├── hello_world.c ├── hello_world_w_symbols.exe ├── hello_world_wo_symbols.exe └── lsh.zip ├── Chapter09 ├── format-strings │ ├── format_string.c │ └── format_string.exe ├── heap-based BOF │ ├── heap_bof.c │ └── heap_bof.exe ├── stack-based BOF │ ├── PoC.py │ ├── exploit.py │ ├── stack_overflow.c │ └── stack_overflow.exe └── sum │ ├── sum.c │ ├── sum.exe │ └── sum.o ├── Chapter10 ├── sscanf.c ├── sscanf.exe ├── sscanf_fixed.c ├── sscanf_ghidra.py ├── sscanf_incorrect.c ├── sscanf_incorrect_arm.exe └── sscanf_incorrect_x64.exe ├── Chapter11 ├── ByteViewer-src.zip ├── HelloWorld │ └── HelloWorldPlugin.java └── ShowInfo │ ├── ShowInfoComponentProvider.java │ └── ShowInfoPlugin.java ├── Chapter12 ├── mz.asm ├── mz.exe ├── raw.dat └── shellcode.bin ├── Chapter13 ├── GhidraSleighEditor │ ├── GhidraSleighEditor-1.0.2.zip │ └── GhidraSleighEditor_README.html ├── ProcessorModuleProject.zip └── processors │ └── x86 │ ├── LICENSE.txt │ ├── Module.manifest │ ├── data │ ├── build.xml │ ├── extensions │ │ └── rust │ │ │ ├── unix │ │ │ ├── cc.xml │ │ │ ├── probe_fixup.xml │ │ │ └── try_fixup.xml │ │ │ └── windows │ │ │ ├── probe_fixup.xml │ │ │ └── try_fixup.xml │ ├── languages │ │ ├── adx.sinc │ │ ├── avx.sinc │ │ ├── avx2.sinc │ │ ├── avx2_manual.sinc │ │ ├── avx_manual.sinc │ │ ├── bmi1.sinc │ │ ├── bmi2.sinc │ │ ├── cet.sinc │ │ ├── clwb.sinc │ │ ├── fma.sinc │ │ ├── ia.sinc │ │ ├── lockable.sinc │ │ ├── lzcnt.sinc │ │ ├── macros.sinc │ │ ├── mpx.sinc │ │ ├── old │ │ │ ├── x86RealV1.lang │ │ │ ├── x86RealV1.trans │ │ │ ├── x86RealV2.lang │ │ │ ├── x86RealV2.trans │ │ │ ├── x86V1.lang │ │ │ ├── x86V1.trans │ │ │ ├── x86V2.lang │ │ │ ├── x86V2.trans │ │ │ ├── x86_64bit_compat32_v2.lang │ │ │ ├── x86_64bit_compat32_v2.trans │ │ │ ├── x86_64bit_v1.lang │ │ │ ├── x86_64bit_v1.trans │ │ │ ├── x86_64bit_v2.lang │ │ │ ├── x86_64bit_v2.trans │ │ │ ├── x86_ProtV2.lang │ │ │ ├── x86_ProtV2.trans │ │ │ ├── x86smmV1.lang │ │ │ ├── x86smmV1.trans │ │ │ ├── x86smmV2.lang │ │ │ └── x86smmV2.trans │ │ ├── pclmulqdq.sinc │ │ ├── rdrand.sinc │ │ ├── sgx.sinc │ │ ├── sha.sinc │ │ ├── smx.sinc │ │ ├── x86-16-real.pspec │ │ ├── x86-16.cspec │ │ ├── x86-16.gdis │ │ ├── x86-16.pspec │ │ ├── x86-32-golang.cspec │ │ ├── x86-32-golang.register.info │ │ ├── x86-64-compat32.pspec │ │ ├── x86-64-gcc.cspec │ │ ├── x86-64-golang.cspec │ │ ├── x86-64-golang.register.info │ │ ├── x86-64-win.cspec │ │ ├── x86-64.dwarf │ │ ├── x86-64.pspec │ │ ├── x86-64.sla │ │ ├── x86-64.slaspec │ │ ├── x86.dwarf │ │ ├── x86.ldefs │ │ ├── x86.opinion │ │ ├── x86.pspec │ │ ├── x86.sla │ │ ├── x86.slaspec │ │ ├── x86borland.cspec │ │ ├── x86delphi.cspec │ │ ├── x86gcc.cspec │ │ └── x86win.cspec │ ├── manuals │ │ └── x86.idx │ ├── patterns │ │ ├── patternconstraints.xml │ │ ├── prepatternconstraints.xml │ │ ├── x86-16_default_patterns.xml │ │ ├── x86-64gcc_patterns.xml │ │ ├── x86-64win_patterns.xml │ │ ├── x86delphi_patterns.xml │ │ ├── x86gcc_patterns.xml │ │ ├── x86win_patterns.xml │ │ └── x86win_prepatterns.xml │ └── sleighArgs.txt │ └── lib │ ├── x86-src.zip │ └── x86.jar ├── Chapter15 ├── hello_world.exe └── symberx.py ├── Chapter16 ├── simple_encoder ├── simple_encoder.c └── simple_encoder.exe ├── Chapter17 └── shellcode.zip ├── Chapter18 ├── Ransomware.gpr └── Ransomware.rep │ ├── idata │ ├── 00 │ │ ├── 00000000.prp │ │ ├── 00000001.prp │ │ ├── ~00000000.db │ │ │ ├── db.1.gbf │ │ │ └── db.2.gbf │ │ └── ~00000001.db │ │ │ ├── db.260.gbf │ │ │ └── db.261.gbf │ ├── ~index.bak │ └── ~index.dat │ ├── projectState │ ├── user │ ├── 00 │ │ ├── 00000000.prp │ │ ├── 00000004.prp │ │ ├── ~00000000.db │ │ │ ├── db.10.gbf │ │ │ └── db.11.gbf │ │ └── ~00000004.db │ │ │ └── db.1.gbf │ ├── ~index.bak │ ├── ~index.dat │ └── ~journal.bak │ └── versioned │ ├── ~index.bak │ └── ~index.dat ├── LICENSE └── README.md /Chapter01/hello_world.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter01/hello_world.c -------------------------------------------------------------------------------- /Chapter01/hello_world.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter01/hello_world.exe -------------------------------------------------------------------------------- /Chapter02/nop_script_java.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter02/nop_script_java.java -------------------------------------------------------------------------------- /Chapter02/nop_script_python.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter02/nop_script_python.py -------------------------------------------------------------------------------- /Chapter03/NopScript2.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter03/NopScript2.java -------------------------------------------------------------------------------- /Chapter03/NopScript2_execution.PNG: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter03/NopScript2_execution.PNG -------------------------------------------------------------------------------- /Chapter04/Ghidra Extension Skeletons/SkeletonAnalyzer.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter04/Ghidra Extension Skeletons/SkeletonAnalyzer.java -------------------------------------------------------------------------------- /Chapter04/Ghidra Extension Skeletons/SkeletonExporter.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter04/Ghidra Extension Skeletons/SkeletonExporter.java -------------------------------------------------------------------------------- /Chapter04/Ghidra Extension Skeletons/SkeletonFileSystem.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter04/Ghidra Extension Skeletons/SkeletonFileSystem.java -------------------------------------------------------------------------------- /Chapter04/Ghidra Extension Skeletons/SkeletonLoader.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter04/Ghidra Extension Skeletons/SkeletonLoader.java -------------------------------------------------------------------------------- /Chapter04/Ghidra Extension Skeletons/SkeletonPlugin.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter04/Ghidra Extension Skeletons/SkeletonPlugin.java -------------------------------------------------------------------------------- /Chapter04/SampleTablePlugin/ghidra/examples/BasicBlockCounterFunctionAlgorithm.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter04/SampleTablePlugin/ghidra/examples/BasicBlockCounterFunctionAlgorithm.java -------------------------------------------------------------------------------- /Chapter04/SampleTablePlugin/ghidra/examples/FunctionAlgorithm.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter04/SampleTablePlugin/ghidra/examples/FunctionAlgorithm.java -------------------------------------------------------------------------------- /Chapter04/SampleTablePlugin/ghidra/examples/FunctionStatsRowObject.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter04/SampleTablePlugin/ghidra/examples/FunctionStatsRowObject.java -------------------------------------------------------------------------------- /Chapter04/SampleTablePlugin/ghidra/examples/ReferenceFunctionAlgorithm.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter04/SampleTablePlugin/ghidra/examples/ReferenceFunctionAlgorithm.java -------------------------------------------------------------------------------- /Chapter04/SampleTablePlugin/ghidra/examples/SampleTableModel.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter04/SampleTablePlugin/ghidra/examples/SampleTableModel.java -------------------------------------------------------------------------------- /Chapter04/SampleTablePlugin/ghidra/examples/SampleTablePlugin.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter04/SampleTablePlugin/ghidra/examples/SampleTablePlugin.java -------------------------------------------------------------------------------- /Chapter04/SampleTablePlugin/ghidra/examples/SampleTableProvider.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter04/SampleTablePlugin/ghidra/examples/SampleTableProvider.java -------------------------------------------------------------------------------- /Chapter04/SampleTablePlugin/ghidra/examples/SizeFunctionAlgorithm.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter04/SampleTablePlugin/ghidra/examples/SizeFunctionAlgorithm.java -------------------------------------------------------------------------------- /Chapter04/SampleTablePlugin/ghidra/examples2/SampleSearchTableModel.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter04/SampleTablePlugin/ghidra/examples2/SampleSearchTableModel.java -------------------------------------------------------------------------------- /Chapter04/SampleTablePlugin/ghidra/examples2/SampleSearchTablePlugin.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter04/SampleTablePlugin/ghidra/examples2/SampleSearchTablePlugin.java -------------------------------------------------------------------------------- /Chapter04/SampleTablePlugin/ghidra/examples2/SampleSearchTableProvider.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter04/SampleTablePlugin/ghidra/examples2/SampleSearchTableProvider.java -------------------------------------------------------------------------------- /Chapter04/SampleTablePlugin/ghidra/examples2/SampleSearcher.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter04/SampleTablePlugin/ghidra/examples2/SampleSearcher.java -------------------------------------------------------------------------------- /Chapter04/SampleTablePlugin/ghidra/examples2/SearchResults.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter04/SampleTablePlugin/ghidra/examples2/SearchResults.java -------------------------------------------------------------------------------- /Chapter05/alina_ghidra_project/alina_ghidra_project.zip: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter05/alina_ghidra_project/alina_ghidra_project.zip -------------------------------------------------------------------------------- /Chapter05/alina_malware_sample/alina_malware_sample.zip: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter05/alina_malware_sample/alina_malware_sample.zip -------------------------------------------------------------------------------- /Chapter05/alina_malware_sample/alina_malware_sample_password.txt: -------------------------------------------------------------------------------- 1 | infected -------------------------------------------------------------------------------- /Chapter06/HashFixer.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter06/HashFixer.java -------------------------------------------------------------------------------- /Chapter06/get_kernel32_exports.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter06/get_kernel32_exports.py -------------------------------------------------------------------------------- /Chapter06/hash_fixer.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter06/hash_fixer.py -------------------------------------------------------------------------------- /Chapter07/HeadlessFindTextScript.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter07/HeadlessFindTextScript.java -------------------------------------------------------------------------------- /Chapter07/HeadlessFindTextScript.properties: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter07/HeadlessFindTextScript.properties -------------------------------------------------------------------------------- /Chapter07/Hello_World/hello_world.c: -------------------------------------------------------------------------------- 1 | int main(){ 2 | printf("Hello world."); 3 | } 4 | -------------------------------------------------------------------------------- /Chapter07/download_malware_samples.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter07/download_malware_samples.py -------------------------------------------------------------------------------- /Chapter07/requirements.txt: -------------------------------------------------------------------------------- 1 | beautifulsoup4 2 | lxml 3 | -------------------------------------------------------------------------------- /Chapter08/hello_world.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter08/hello_world.c -------------------------------------------------------------------------------- /Chapter08/hello_world_w_symbols.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter08/hello_world_w_symbols.exe -------------------------------------------------------------------------------- /Chapter08/hello_world_wo_symbols.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter08/hello_world_wo_symbols.exe -------------------------------------------------------------------------------- /Chapter08/lsh.zip: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter08/lsh.zip -------------------------------------------------------------------------------- /Chapter09/format-strings/format_string.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter09/format-strings/format_string.c -------------------------------------------------------------------------------- /Chapter09/format-strings/format_string.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter09/format-strings/format_string.exe -------------------------------------------------------------------------------- /Chapter09/heap-based BOF/heap_bof.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter09/heap-based BOF/heap_bof.c -------------------------------------------------------------------------------- /Chapter09/heap-based BOF/heap_bof.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter09/heap-based BOF/heap_bof.exe -------------------------------------------------------------------------------- /Chapter09/stack-based BOF/PoC.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter09/stack-based BOF/PoC.py -------------------------------------------------------------------------------- /Chapter09/stack-based BOF/exploit.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter09/stack-based BOF/exploit.py -------------------------------------------------------------------------------- /Chapter09/stack-based BOF/stack_overflow.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter09/stack-based BOF/stack_overflow.c -------------------------------------------------------------------------------- /Chapter09/stack-based BOF/stack_overflow.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter09/stack-based BOF/stack_overflow.exe -------------------------------------------------------------------------------- /Chapter09/sum/sum.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter09/sum/sum.c -------------------------------------------------------------------------------- /Chapter09/sum/sum.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter09/sum/sum.exe -------------------------------------------------------------------------------- /Chapter09/sum/sum.o: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter09/sum/sum.o -------------------------------------------------------------------------------- /Chapter10/sscanf.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter10/sscanf.c -------------------------------------------------------------------------------- /Chapter10/sscanf.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter10/sscanf.exe -------------------------------------------------------------------------------- /Chapter10/sscanf_fixed.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter10/sscanf_fixed.c -------------------------------------------------------------------------------- /Chapter10/sscanf_ghidra.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter10/sscanf_ghidra.py -------------------------------------------------------------------------------- /Chapter10/sscanf_incorrect.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter10/sscanf_incorrect.c -------------------------------------------------------------------------------- /Chapter10/sscanf_incorrect_arm.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter10/sscanf_incorrect_arm.exe -------------------------------------------------------------------------------- /Chapter10/sscanf_incorrect_x64.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter10/sscanf_incorrect_x64.exe -------------------------------------------------------------------------------- /Chapter11/ByteViewer-src.zip: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter11/ByteViewer-src.zip -------------------------------------------------------------------------------- /Chapter11/HelloWorld/HelloWorldPlugin.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter11/HelloWorld/HelloWorldPlugin.java -------------------------------------------------------------------------------- /Chapter11/ShowInfo/ShowInfoComponentProvider.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter11/ShowInfo/ShowInfoComponentProvider.java -------------------------------------------------------------------------------- /Chapter11/ShowInfo/ShowInfoPlugin.java: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter11/ShowInfo/ShowInfoPlugin.java -------------------------------------------------------------------------------- /Chapter12/mz.asm: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter12/mz.asm -------------------------------------------------------------------------------- /Chapter12/mz.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter12/mz.exe -------------------------------------------------------------------------------- /Chapter12/raw.dat: -------------------------------------------------------------------------------- 1 | 1=potato;2=fish;3=person 2 | -------------------------------------------------------------------------------- /Chapter12/shellcode.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter12/shellcode.bin -------------------------------------------------------------------------------- /Chapter13/GhidraSleighEditor/GhidraSleighEditor-1.0.2.zip: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/GhidraSleighEditor/GhidraSleighEditor-1.0.2.zip -------------------------------------------------------------------------------- /Chapter13/GhidraSleighEditor/GhidraSleighEditor_README.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/GhidraSleighEditor/GhidraSleighEditor_README.html -------------------------------------------------------------------------------- /Chapter13/ProcessorModuleProject.zip: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/ProcessorModuleProject.zip -------------------------------------------------------------------------------- /Chapter13/processors/x86/LICENSE.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/LICENSE.txt -------------------------------------------------------------------------------- /Chapter13/processors/x86/Module.manifest: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/build.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/build.xml -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/extensions/rust/unix/cc.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/extensions/rust/unix/cc.xml -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/extensions/rust/unix/probe_fixup.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/extensions/rust/unix/probe_fixup.xml -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/extensions/rust/unix/try_fixup.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/extensions/rust/unix/try_fixup.xml -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/extensions/rust/windows/probe_fixup.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/extensions/rust/windows/probe_fixup.xml -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/extensions/rust/windows/try_fixup.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/extensions/rust/windows/try_fixup.xml -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/adx.sinc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/adx.sinc -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/avx.sinc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/avx.sinc -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/avx2.sinc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/avx2.sinc -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/avx2_manual.sinc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/avx2_manual.sinc -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/avx_manual.sinc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/avx_manual.sinc -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/bmi1.sinc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/bmi1.sinc -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/bmi2.sinc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/bmi2.sinc -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/cet.sinc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/cet.sinc -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/clwb.sinc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/clwb.sinc -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/fma.sinc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/fma.sinc -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/ia.sinc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/ia.sinc -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/lockable.sinc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/lockable.sinc -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/lzcnt.sinc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/lzcnt.sinc -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/macros.sinc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/macros.sinc -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/mpx.sinc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/mpx.sinc -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/old/x86RealV1.lang: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/old/x86RealV1.lang -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/old/x86RealV1.trans: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/old/x86RealV1.trans -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/old/x86RealV2.lang: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/old/x86RealV2.lang -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/old/x86RealV2.trans: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/old/x86RealV2.trans -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/old/x86V1.lang: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/old/x86V1.lang -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/old/x86V1.trans: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/old/x86V1.trans -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/old/x86V2.lang: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/old/x86V2.lang -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/old/x86V2.trans: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/old/x86V2.trans -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/old/x86_64bit_compat32_v2.lang: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/old/x86_64bit_compat32_v2.lang -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/old/x86_64bit_compat32_v2.trans: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/old/x86_64bit_compat32_v2.trans -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/old/x86_64bit_v1.lang: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/old/x86_64bit_v1.lang -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/old/x86_64bit_v1.trans: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/old/x86_64bit_v1.trans -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/old/x86_64bit_v2.lang: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/old/x86_64bit_v2.lang -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/old/x86_64bit_v2.trans: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/old/x86_64bit_v2.trans -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/old/x86_ProtV2.lang: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/old/x86_ProtV2.lang -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/old/x86_ProtV2.trans: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/old/x86_ProtV2.trans -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/old/x86smmV1.lang: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/old/x86smmV1.lang -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/old/x86smmV1.trans: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/old/x86smmV1.trans -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/old/x86smmV2.lang: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/old/x86smmV2.lang -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/old/x86smmV2.trans: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/old/x86smmV2.trans -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/pclmulqdq.sinc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/pclmulqdq.sinc -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/rdrand.sinc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/rdrand.sinc -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/sgx.sinc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/sgx.sinc -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/sha.sinc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/sha.sinc -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/smx.sinc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/smx.sinc -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/x86-16-real.pspec: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/x86-16-real.pspec -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/x86-16.cspec: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/x86-16.cspec -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/x86-16.gdis: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/x86-16.gdis -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/x86-16.pspec: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/x86-16.pspec -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/x86-32-golang.cspec: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/x86-32-golang.cspec -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/x86-32-golang.register.info: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/x86-32-golang.register.info -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/x86-64-compat32.pspec: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/x86-64-compat32.pspec -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/x86-64-gcc.cspec: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/x86-64-gcc.cspec -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/x86-64-golang.cspec: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/x86-64-golang.cspec -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/x86-64-golang.register.info: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/x86-64-golang.register.info -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/x86-64-win.cspec: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/x86-64-win.cspec -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/x86-64.dwarf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/x86-64.dwarf -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/x86-64.pspec: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/x86-64.pspec -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/x86-64.sla: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/x86-64.sla -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/x86-64.slaspec: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/x86-64.slaspec -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/x86.dwarf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/x86.dwarf -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/x86.ldefs: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/x86.ldefs -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/x86.opinion: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/x86.opinion -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/x86.pspec: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/x86.pspec -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/x86.sla: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/x86.sla -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/x86.slaspec: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/x86.slaspec -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/x86borland.cspec: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/x86borland.cspec -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/x86delphi.cspec: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/x86delphi.cspec -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/x86gcc.cspec: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/x86gcc.cspec -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/languages/x86win.cspec: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/languages/x86win.cspec -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/manuals/x86.idx: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/manuals/x86.idx -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/patterns/patternconstraints.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/patterns/patternconstraints.xml -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/patterns/prepatternconstraints.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/patterns/prepatternconstraints.xml -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/patterns/x86-16_default_patterns.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/patterns/x86-16_default_patterns.xml -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/patterns/x86-64gcc_patterns.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/patterns/x86-64gcc_patterns.xml -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/patterns/x86-64win_patterns.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/patterns/x86-64win_patterns.xml -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/patterns/x86delphi_patterns.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/patterns/x86delphi_patterns.xml -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/patterns/x86gcc_patterns.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/patterns/x86gcc_patterns.xml -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/patterns/x86win_patterns.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/patterns/x86win_patterns.xml -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/patterns/x86win_prepatterns.xml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/data/patterns/x86win_prepatterns.xml -------------------------------------------------------------------------------- /Chapter13/processors/x86/data/sleighArgs.txt: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /Chapter13/processors/x86/lib/x86-src.zip: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/lib/x86-src.zip -------------------------------------------------------------------------------- /Chapter13/processors/x86/lib/x86.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter13/processors/x86/lib/x86.jar -------------------------------------------------------------------------------- /Chapter15/hello_world.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter15/hello_world.exe -------------------------------------------------------------------------------- /Chapter15/symberx.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter15/symberx.py -------------------------------------------------------------------------------- /Chapter16/simple_encoder: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter16/simple_encoder -------------------------------------------------------------------------------- /Chapter16/simple_encoder.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter16/simple_encoder.c -------------------------------------------------------------------------------- /Chapter16/simple_encoder.exe: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter16/simple_encoder.exe -------------------------------------------------------------------------------- /Chapter17/shellcode.zip: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter17/shellcode.zip -------------------------------------------------------------------------------- /Chapter18/Ransomware.gpr: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /Chapter18/Ransomware.rep/idata/00/00000000.prp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter18/Ransomware.rep/idata/00/00000000.prp -------------------------------------------------------------------------------- /Chapter18/Ransomware.rep/idata/00/00000001.prp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter18/Ransomware.rep/idata/00/00000001.prp -------------------------------------------------------------------------------- /Chapter18/Ransomware.rep/idata/00/~00000000.db/db.1.gbf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter18/Ransomware.rep/idata/00/~00000000.db/db.1.gbf -------------------------------------------------------------------------------- /Chapter18/Ransomware.rep/idata/00/~00000000.db/db.2.gbf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter18/Ransomware.rep/idata/00/~00000000.db/db.2.gbf -------------------------------------------------------------------------------- /Chapter18/Ransomware.rep/idata/00/~00000001.db/db.260.gbf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter18/Ransomware.rep/idata/00/~00000001.db/db.260.gbf -------------------------------------------------------------------------------- /Chapter18/Ransomware.rep/idata/00/~00000001.db/db.261.gbf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter18/Ransomware.rep/idata/00/~00000001.db/db.261.gbf -------------------------------------------------------------------------------- /Chapter18/Ransomware.rep/idata/~index.bak: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter18/Ransomware.rep/idata/~index.bak -------------------------------------------------------------------------------- /Chapter18/Ransomware.rep/idata/~index.dat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter18/Ransomware.rep/idata/~index.dat -------------------------------------------------------------------------------- /Chapter18/Ransomware.rep/projectState: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter18/Ransomware.rep/projectState -------------------------------------------------------------------------------- /Chapter18/Ransomware.rep/user/00/00000000.prp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter18/Ransomware.rep/user/00/00000000.prp -------------------------------------------------------------------------------- /Chapter18/Ransomware.rep/user/00/00000004.prp: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter18/Ransomware.rep/user/00/00000004.prp -------------------------------------------------------------------------------- /Chapter18/Ransomware.rep/user/00/~00000000.db/db.10.gbf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter18/Ransomware.rep/user/00/~00000000.db/db.10.gbf -------------------------------------------------------------------------------- /Chapter18/Ransomware.rep/user/00/~00000000.db/db.11.gbf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter18/Ransomware.rep/user/00/~00000000.db/db.11.gbf -------------------------------------------------------------------------------- /Chapter18/Ransomware.rep/user/00/~00000004.db/db.1.gbf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter18/Ransomware.rep/user/00/~00000004.db/db.1.gbf -------------------------------------------------------------------------------- /Chapter18/Ransomware.rep/user/~index.bak: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter18/Ransomware.rep/user/~index.bak -------------------------------------------------------------------------------- /Chapter18/Ransomware.rep/user/~index.dat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/Chapter18/Ransomware.rep/user/~index.dat -------------------------------------------------------------------------------- /Chapter18/Ransomware.rep/user/~journal.bak: -------------------------------------------------------------------------------- 1 | IDEL:/udf_a78384c83e369899447390700 2 | -------------------------------------------------------------------------------- /Chapter18/Ransomware.rep/versioned/~index.bak: -------------------------------------------------------------------------------- 1 | VERSION=1 2 | / 3 | NEXT-ID:0 4 | MD5:d41d8cd98f00b204e9800998ecf8427e 5 | -------------------------------------------------------------------------------- /Chapter18/Ransomware.rep/versioned/~index.dat: -------------------------------------------------------------------------------- 1 | VERSION=1 2 | / 3 | NEXT-ID:0 4 | MD5:d41d8cd98f00b204e9800998ecf8427e 5 | -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/PacktPublishing/Ghidra-Software-Reverse-Engineering-for-Beginners---Second-Edition/HEAD/README.md --------------------------------------------------------------------------------