Reverse Engineering: Ghidra For Beginners

Ghidra是IDA Pro的强大竞争对手，并且被NSA本身用于逆向工程。最好的是，它是完全免费的。它用于逆向工程，恶意软件分析和漏洞利用分析。在本课程中，我们将通过解决Linux和Windows CrackMe的挑战来学习Ghidra。CrackMe是一个小程序，旨在测试程序员的逆向工程技能。本课程向任何想开始该领域的人员介绍逆向工程。它适合想要学习软件内部工作方式的软件开发人员，也适合想要了解Linux和Windows二进制文件工作方式的逆向工程师。除了可能已经熟悉的其他任何工具之外，本课程还将为您提供使用Ghidra的知识和技能。

我将首先向您展示如何安装Oracle Virtual Box。然后，在Virtual Box中安装Java SDK和Kali Linux。然后，我们将对Linux可执行文件进行反向工程。

接下来，我们将继续安装适用于Windows的Java SDK和Ghidra，并对Windows程序进行反向和分析。您还将学习如何反转GUI CrackMe。您将学习如何使用函数图，函数调用树，搜索字符串，定义的字符串等。该课程还将涵盖如何识别程序入口点，以及如何找到命令行界面应用程序的主要功能以及WinGUI（基于GUI的应用程序）的主要功能。

在本课程结束时，您将具有开始反转和分析Linux和Windows二进制文件的基本技能。

MP4 | Video: h264, 1280×720 | Audio: AAC, 44.1 KHz, 2 Ch
Genre: eLearning | Language: English + srt | Duration: 25 lectures (3h 55m) | Size: 2 GB
Learn Reverse Engineering Using Ghidra On Linux And Windows

What you’ll learn:
Reverse Engineering
Basics of Ghidra
Solving Linux and Windows CrackMe’s
Understand Windows API’s
Identify Entry Points, Main and WinMain functions
Analyzing using Function Graph and Function Call Trees
Doing String Search and Defined Strings
Windows API
Function Call Graphs
Creating Functions
Converting data types
Editing function signatures
Cross referencing function calls and strings
and more…

Requirements
Familiar with basic Linux Commands
Some Basics of Assembly and C would be helpful but not strictly necessary
Windows PC

Description
If you have never used Ghidra before and want to learn how get started with using Ghidra to reverse engineer and analyse programs, then this is the course for you.

Ghidra is the strong competitor to IDA Pro and is used by NSA itself for Reverse Engineering. And the best thing is that it is totally free. It is used for Reverse Engineering, Malware Analysis and Exploits analysis. In this course we will learn Ghidra by solving Linux and Windows CrackMe challenges. A CrackMe is a small program designed to test a programmer’s reverse engineering skills. This course is an introduction to Reverse Engineering for anyone who wants to get started in this field. It is suitable for software developers who want to learn how software works internally and also for reverse engineers who want to understand how Linux and Windows binaries work. This course will equip you with the knowledge and skill to use Ghidra in addition to whatever other tools you might already be familiar. It is also suitable for absolute beginners with no knowledge of reversing, as I will take you from zero to basics.

I will start off with showing you how to install Oracle Virtual Box. Then, installing Java SDK and Kali Linux in the Virtual Box. Then, we will reverse engineer Linux executable files.

Next, we will move on to installing Java SDK and Ghidra for Windows and reverse and analyze Windows programs. You will also learn how to reverse GUI CrackMe’s. You will learn how to use Function Graphs, Function Call Trees, Search String, Defined Strings and more. The course will also cover how to identify program entry point and also find the main functions for command line interface apps and WinMain for GUI based apps.

By the end of this course, you will have the basic skills to start reversing and analyzing Linux and Windows binaries.

What you will learn:

How to disassemble programs into assembly code

How to decompile programs to C code

Static Analysis

Understand Windows API’s

Identify entry points, main and WinMain functions

Use String Search and Defined Strings

Visualizing the Call Stack using Function Graph and Function Call Trees

Solving Crackmes

and more …

Suitable for:

Anyone interested to learn Reverse Engineering on Linux and Windows executable files.

Who this course is for
Anyone interested to learn how to get started with Ghidra on Linux and Windows
Those who have never used Ghidra before and want to learn the basics
Students with some basic experience with other disassemblers