NSA Releasing the GHIDRA Reverse Engineering Tool at RSAConference

Minimalist · Jan 5, 2019

At the RSAConference in March, a free reverse engineering framework called GHIDRA is being released that was developed by the U.S. National Security Agency.
Click to expand...

https://www.bleepingcomputer.com/ne...ra-reverse-engineering-tool-at-rsaconference/

guest · Mar 6, 2019

Reverse-engineering suite now available to download
March 6, 2019
https://www.theregister.co.uk/2019/03/06/nsa_ghidra_joyce/

Spoiler alert: it's Apache 2.0-licensed, available for download here, and requires a Java runtime – and the agency swears it hasn't backdoored the suite.
“There is no backdoor in Ghidra,” he announced. “This is the last community you want to release something out to with a backdoor installed, to people who hunt for this stuff to tear apart.”

“Ghidra is out but this is not the end,” he promised. “This is a healthy ongoing development in the NSA, it’s our intent to have a GitHub repository out there. The buildable environment will come and we’ll accept contributions.”
Click to expand...

ronjor · Mar 19, 2019

Researcher Says NSA’s Ghidra Tool Can Be Used for RCE

Tara Seals March 19, 2019
Ghidra, a free, open-source software reverse-engineering tool that was released by the National Security Agency at RSA, has been found to be a potential conduit to remote code-execution.
Also, an NSA developer swiftly responded to @sghctoma’s Github posting, saying that addressing the bug would be “a pretty straightforward configuration fix.”
“I made factory methods to create properly configured SAXParsers and SAXBuilders, and refactored everything to use them,” the developer said – before closing the issue.
Click to expand...

guest · Apr 2, 2019

Ghidra SRE: The AZORult Field Test
April 2, 2019
https://blog.yoroi.company/research/ghidra-sre-the-azorult-field-test/

One of the most anticipated moments in the infosec community during the last few months was, with no doubt, the Ghidra public release. On the 5th of March, at the RSA conference, Ghidra has been presented to the public revealing the inner details of the Software Reverse Engineering (SRE) framework that National Security Agency used for more than a decade.

Cybaze-Yoroi ZLAB team also decided to play around with it, but this time using a real case study, AZORult: one of the most active threats spreading nowadays, always using new methodologies to avoid detection. For this reason a recent AZORult sample has been chosen to field-test the NSA reverse engineering tool.
Conclusion
Ghidra is a valuable tool in the arsenal of a Reverse Engineer.
The NSA choice to give back to the security community is admirable, especially because the tool itself is solid and has advanced peculiarities that make it suitable for professional usage.
Click to expand...

guest · Apr 23, 2019

NSA Releases Security Research Tool, But Can You Trust It?
April 23, 2019
https://incyberdefense.com/news/nsa-releases-security-research-tool-but-can-you-trust-it/

The big question though is can they trust it, given the nature of the NSA beast? During a speech at the annual RSA security conference in San Francisco this week, Senior Advisor for Cybersecurity Strategy to the Director of the NSA, Rob Joyce, insisted that there is no backdoor in Ghidra
Do you trust it, will you use it?
You might be forgiven for thinking, taking the plentiful opinions of security and privacy advocates regarding NSA surveillance techniques into account, that there might be little trust in such a tool from the cybersecurity profession.
Forgiven, but wrong. The vast majority of those people I contacted were incredibly welcoming of the Ghidra public release

Adding yet another complimentary voice (with a touch of caution) is Ben Herzberg, director of threat research at Imperva. “While this is definitely a positive step from the NSA, we must remember that this release is just the tip of the iceberg” Herzberg says, adding “More importantly, this definitely does not mean that the agency is becoming a transparent organization.”
Click to expand...

Minimalist · Aug 9, 2019

NSA to build new features into its open-source malware analysis tool Ghidra

The US National Security Agency (NSA) is builing several new features into its malware reverse-engineering tool, Ghidra, in a bid to improve accuracy.

Brian Knighton, a senior cybersecurity researcher at the NSA, and Chris Delikat, a team lead in NSA's Research Directorate, said that the agency is working to enhance Ghidra with a variety of new features, including processor modules and support for system calls.
Click to expand...

https://www.computing.co.uk/ctg/news/3080266/nsa-ghidra-features

Minimalist · Sep 30, 2019

New Bug Found in NSA’s Ghidra Tool

Flaw in National Security Agency’s Ghidra reverse-engineering tools allows hackers to execute code in vulnerable systems.
Click to expand...

https://threatpost.com/bug-in-nsas-ghidra/

Log in or Sign up

NSA Releasing the GHIDRA Reverse Engineering Tool at RSAConference

Minimalist Registered Member

guest Guest

ronjor Global Moderator

guest Guest

guest Guest

Minimalist Registered Member

Minimalist Registered Member

Log in or Sign up

NSA Releasing the GHIDRA Reverse Engineering Tool at RSAConference

Minimalist Registered Member

guest Guest

ronjor Global Moderator

guest Guest

guest Guest

Minimalist Registered Member

Minimalist Registered Member

Useful Searches