Ghidra quickstart & tutorial: Solving a simple crackme
ฝัง
- เผยแพร่เมื่อ 17 พ.ค. 2024
- In this introduction to Ghidra we will solve a simple crackme - without reading any assembly!
Twitter: / ghidraninja
Links from the video:
Crackme: crackmes.one/crackme/5b8a37a4...
Download Ghidra: ghidra-sre.org
Scrolling issue: github.com/NationalSecurityAg...
Please create a series of Reverse Engineering Basics! Love this!
Its like the perfect purity of a man page was compiled into a perfect video. Instructions so clear I accidentally cracked the travelling knapsack problem.
4:07 "a small popup will show up."
popup occupies most of screen.
Brilliant "in a nutshell" tutorial of getting to know the program quickly.
Could you please do a follow-up of the very same crack me, but with showing how you "crack" the crackme by patching the binary inside Ghidra so that it always jumps to the success condition regardless of the input given?
Wow is that even possible with ghidra?
Gil Bytepatching should be simple, worst case you just use like a Hex Editor and jump to the offset and manually patch ig
@@gilperon its possible i. Gdb, i would hope so! :)
"Let's maximize the window"
> Actually makes windows smaller
And that's Mac OS for you
@@ytxstream ⌘ + ⌥ + d is your friend
@@ytxstream *Java's half-assed implementation of
He actually just moved it to the right.
^^ effing owned dude... 😅
By a Polock Frank... sick digs
Excellent explanation. Clear, concise and a great pace, wasn't confusingly fast or laboriously slow. I hope you continue to make videos on Ghidra.
Crystal-clear, methodical and systematic walkthrough! Thank you!
wow this tutorial is just perfect, the pace the explanations, everything ! Thank you
Beat tutorial I’ve ever seen. Clear, concise and simple.
Fantastic. Hopefully looking forward to more of the same.
Jesus you make it look so easy !! Love it ! Keep em coming my friend.
I had a quick look at Ghidra a few weeks ago and it seemed rather complex.... It certainly seems a lot less complex now! Thanks.
Thanks ninja! A very well prepared video. Hopefully more will come :)
Thank you for a great overview. I'm getting started quite easily because of this 👍
wow, nice introduction man. looking forward for more videos from you!
Thank you Ghidra Ninja. You are a true Ninja!!
I love it , already subscribed !
amazing man keep uploading ghidra tutorials
Excelent. We want more!! Really good tutorials
Your videos are awesome! Please keep making content like this!
Thank you - and pls. continue the work. PS: made me smile.
awesome tutorial - keep them coming man!
Great job explaining - thank you!
Liked your explaination, easy and clear. Keep going please.
Thanks man. I enjoyed you cracking that.
This helped so much, the main thing I needed was just the fact that you can click on named functions in the decompile window to go to them. Seems obvious but I just didn't know!
Good and fast introduction!
You have 13.2K subscribers and only 3 videos from 8 months ago! This was such a great video, I was disappointed to see you didn't have more content.
Tech TH-camrs always have their view count scaled way down
very nice and efficient intro into ghidra gui
Love this. Keep up the great content man
love the “NSA-Mainframe” on your terminal. I let out a good laugh at that!
Nice introduction! Had have no idea abut Ghidra ;)
awesome video man,keep doing more basic malware analyasis and reversing.Thanks:)
Many thanks for suggesting this software ... I wanted to look into reverse engineering for years, but had not yet come across such an handy tool. AIDA wasn't really affordable for experimenting ... Again thank you very much!
Extremely informative!
Very good video!
very good video! Im already applying for NSA!
Very cool, I LOVE Ghidra so far
Thank you for the nice tutorial!
Very nice. Great tutorial.
Excellent video! Is there a way to isolate and tag raw binary into separate chunks? For example if you read an EEPROM and load it in Ghidra as raw binary can you then split it up into prgrogram, data, etc so that decompiler can make sense of it?
Great video. Keep it up!
Great video. I learned a lot from it.
Thanks for wonderful tutorial. Subscribed.
Jidra 😞😭 didnt think that video would stress me out this much 🥶🥶🤯
Oh my... this video is amazing! ❤
love it bruh...
keep it up
That's a great tutorial man ,thx!
Nice video! Do you plan on making more? Id love to see more videos on Ghidra :)
Nice, I was looking for samples with known outcomes so I could follow the technique ! Awesome . (Mickyj Whitehat)
you've literally got a black hat on. don't lie
The video was very helpful, keep it up bro👍👍
Great Job! Keep up please.
Thank you, very instructive.
Great job
"Just hit okay because nobody reads those anyway" Well, I guess I'm a nobody.
You sir are a thought criminal reading those agreements... tut tut..
@@EchoXIIIGO I do recall about 10 years ago, a very prominent software vendor had an Easter egg in the terms and conditions. something about giving away your first born and pledging elegance to satan. It took about 5 or more years for someone to finally read it and mention it. (Mickyj Whitehat)
@benzo I highly doubt an opensource project would send data to the NSA, I feel like people are very aware of their role in the world, especially floss peeps.
You must know what you are agreeing to before you agree.
very thorough. thanks
Great tutorial!
Great content, subbed, keep them coming!
Looking forward to more videos like this.
Just curious as I just learned that this tool exists, what is difference using this vs ollydbg for cracking? Other than assembly
Amazing tutorial
Thank you for this video!
Great video! You explain things really simply. One question I have: can you use Ghidra to compare two similar .dll written in C++ files to find the differences between them?
Very good tutorial
Thanks man for the knowledge you are awsm
nice intro! of course, there's any number of possible solutions given that the only criterion is an @ in 5th position
Waiting for more videos from you.
great !!! Please, more !!!
Nice video, but I have a question. Is it possible to get the flag without putting the password? Since the flags stored somewhere within the file, right?
THANK YOU FOR DOING GOD'S WORK!
How are you able to run the Unix binary file. Im getting:
```zsh: exec format error: ./rev50_linux64-bit```
Watched first 11 seconds. subscribed. I think I'm only subscribed to a dozen people after over a decade of being on TH-cam.
Thank you so much!!!
Great, really great !
Great video. But could you make a video comparing Ghidra to IDA or some other RE tools?
cooooooooooooooooooooooooool
Loved it!
Love it.
Great video!
Do you know how to hide the project window? i'd love to hide that window once i ran the code browser
my terminal doesnt allow me to open the crack me initially, you said you're using a VM, is that a different terminal than mac's default?
Thank you!
I remember solving that very same Crack me with Hopper.
thanks for the video, I have not given GHIDRA a try yet. I'm still learning how to pronounce it correctly :)
It is pronounced "Gee-druh" (github.com/NationalSecurityAgency/ghidra/wiki/Frequently-asked-questions#how-do-you-pronounce-ghidra), but that's okay.
This video was a very nice introduction, by the way!
Great tutorial, kudos! Can you elaborate why is there an issue requiring the usage of a pointer to a pointer for argv ?
did you figure out? I am also curious
Thanks for sharing! What do you use to show your keyboard input?
It's a tool called Keycastr
@@stacksmashing
why am i getting this error ?
/ghidraprojects/rev50_linux64-bit: cannot execute binary file
are you planning on doing a course series for this? I would buy it
Kind of a dumb question but how did you get your keystrokes to show up on the screen like that?
Could you please make a tutorial on how to skirt the Mac OX Catalina 10.15.8 and download Ghidra? I really want to start using Ghidra but my mac will not allow the Javascript updates ...
More tutorials please!!!
I hope that you create a beginner series in reverse engineering embedded firmware
awesome!
Thanks for the video =)
Is there a way to find what part(s) of the program are referencing a data-text string? I've tried doing a global search of the address, but where can I find the functions that use it? I've looked at the tutorial 'Z0FCourse_ReverseEngineering' from stryker2k2/ wolfshirtzlabs but don't see that covered!
Very new to this, would OllyDbg or IdaPro be more beginner friendly?
I'm a normie, no govlarp here,
IDA is the only one I've heard of,
Would be interesting to see how file analysis programs are built from scratch, as well as what language they would have to use to build a file analysis tool like ghidra or IDA
Ghidra is kind of esoteric,
IDA all the normies like me will recognize
I know the govlarp people like using python
There should be a list of "X-REFS" on the far right of the listing (you might need to scroll horizontally). There should also be a right-click option to show/list references.
You know its a good hacking tool when it uses Windows 95 style GUI.
Hello, loved your tutorial! Do you know if Ghidra has the ability to view embedded image files?
Thanks! Yes it does, and they’ll be marked as a bookmark
@@stacksmashing Thanks!! Yep I see them all in bookmarks, now I need to figure out how to view them!
Just double click on the bookmark, and the picture should be in the disassembly view
Approved for 100k.
Could you do a little tutorial using a MSDOS 16bit binary file? Maybe something that's not packed?
What VM do you use for running Linux code in OSX?
Hey when trying to search for main it doesnt show any results and the main function i guess in some format like FUN_11001 some numbers can you tell me some settings to resolve this?
Are you on a Mac or is this a Vbox
What Microsoft did right is "Maximize" and the taskbar.
nice but can u show the next step to us like if i have to modify the exe and have to change password from @ to something else how am going to do that . i know there are tons of tuts there but all of them go through asm analysis and not teach exe modification , so will be thankful if u can make detail video on exe modifications
awsome tutorial !! only issue why we changed char* argv[] to char **argv ??
Because Ghidra unfortunately does not support [] in the function signature - so instead of saying 'this is a pointer to an array' we say 'this is a pointer to a pointer', which gives us the result we want :) (Simplified: Working with an array in C is basically just pointer-arithmetic in the background)