I've been using a rather powerful, feature laden new tool for exploring and analyzing ELF/COFF files (as generated by most MCU development tools and languages).
It's named
Ghidra and I wondered if others here have used this for anything? It's written and maintained by the National Security Agency FYI.
It can disassemble, and analyze these files for a huge number of things.
It's able to disassemble a large variety of CPU types, brands, models.
Ghidra did not work at all for me, seems to be malware now.
It seems to be orphaned, after the NSA gave it as public domain, I see it has tons of issues and nobody looking after it.
Disassembler output was a few opcodes and then nothing.
Thankfully I used it on a junk PC and sure enough running the disassembler the snek logo shows up and a white flash on the screen, and found it corrupted most Notepad++ documents and that cache.
Would not use or recommend at all.
Ghidra works fine for me? It's no IDA but it's good enough.
Am aware of it; haven't had need to use it yet.
Tim
It's named Ghidra and I wondered if others here have used this for anything? It's written and maintained by the National Security Agency FYI.
Yep. I used it at University along with IDA Pro for reverse engineering malware.
I've used it a lot for mcu decompiling and reverse-engineering linux binaries.
Pretty capable, 100% free, what else do you what?
I have used it a lot with some Cisco router reverse engineering projects (68k CPUs).
I use it for little bits here and there. It's not perfect, but for something you get for free it's not too bad I think.
It seems to be orphaned
I new release came out today
I used it to reverse engineer my laptop's BIOS to permit replacement of the wifi card:
https://halestrom.net/darksleep/blog/047_x131e_repair/A few rough edges that I complain about (eg not always automatically detecting registers to be function arguments) but it worked fine.
Thankfully I used it on a junk PC and sure enough running the disassembler the snek logo shows up and a white flash on the screen, and found it corrupted most Notepad++ documents and that cache.
Perhaps you clicked on a Google sponsored link (*shudder*) and got something that is actually legitimately malware? Lots of popular software gets targeted with lookalike sites.
[...] Perhaps you clicked on a Google sponsored link (*shudder*) and got something that is actually legitimately malware? Lots of popular software gets targeted with lookalike sites.
"...created and maintained by the National Security Agency Research Directorate."
I started at the software's website
https://ghidra-sre.org/ and downloaded from the github repo as I recall.
I had Notepad++ documents erased and a few reverted to empty with size of 1KB, and others went back months as if retrieved from some old cache. It was weird enough and scuttled a lot of work, so I will not touch NSA S/W. The strobing Cobra snake got me. Another (peer) engineer tried Ghidra for another project and he said it didn't work for him.
There are other disassemblers that work for me.