Ghidra hands-on with Vesa-Pekka

Reverse engineer binaries with Ghidra.

In English. From 11:00 to 14:00.

You can analyze (and even modify) binaries - even without source code. Ghidra is a leading tool for reverse engineering binaries. It can decompile binaries into ugly C.

The session will cover an introduction to Ghidra and a guided hands-on walkthrough of the tool.

Prerequisites

To participate, you

• Should know some programming
• Bring a laptop
• Have a working Ghidra 12.0.1 installed beforehand

Vesa-Pekka Palmu

Vesa-Pekka Palmu, a software developer, passionate hardware hacker and a CTF binary challenge author. He has previously held ghidra workshops for cybersecurity professionals with Helsec Ry.

Ghidra installation instructions from Lari

You should have the latest version of Ghidra (12.0.1) before the session. To verify your version, open Ghidra and check Help → About.

Please bring your laptop and make sure Ghidra starts successfully on your machine before the session begins. This is a hands-on lecture, so we need everyone ready to work from the start.

Mac users: After installing Ghidra on macOS, you must also build the locally signed helper tools (“native components”) once on your machine. If you install Ghidra and Gradle via Homebrew, you can do this as follows (run in Terminal):

Intel-based Macs:

$ cd /usr/local/Cellar/ghidra/12.0.1/libexec/support/gradle
$ gradle buildNatives

Apple Silicon (ARM) Macs:

$ cd /opt/homebrew/Cellar/ghidra/12.0.1/libexec/support/gradle
$ gradle buildNatives

If gradle is not recognized, install it with:

$ brew install gradle

Course

This visiting lecture is part of the course (Application Hacking by Tero Karvinen & Lari Iso-Anttila. If you're currently enrolled in the course, you automatically have a seat in this visiting workshop, and you don't need to register.

More invites

Tero's list has invitations to events like this: https://terokarvinen.com/newsletter/